tests/ace/test-configuration/attr_policy-example7.xml

   1 <policy-set id="Policy-3" combine="deny-overrides">
   2
   3  <policy>
   4           <target>
   5              <subject>
   6                  <subject-match attr="name" match="analogclock"/>
   7                  <subject-match attr="uri.host" match="freebeer.evil.com" />
   8                  <subject-match attr="key-root-trust" match="manufacturer" />
   9                  <subject-match attr="id" match="urn:megacorp:widget:anapp" />
  10                  <subject-match attr="signer-id" match="7zha89%49xL$" />
  11                  <subject-match attr="version" match="5"/>
  12
  13           </subject>
  14          </target>
  15       <rule effect="permit">
  16              <condition>
  17
  18                            <subject-match attr="resource-id">device.simcard</subject-match>
  19                <subject-match attr="r8v2" match="2" />
  20                <subject-match attr="author" match="author3" />
  21                            <subject-match attr="r9a.scheme" match="http://onet.pl:80/test.html" />
  22                <subject-match attr="r9b.authority" match="http://onet.pl:80/test.html" />
  23                <subject-match attr="r9c.scheme-authority" match="http://onet.pl" />
  24
  25                         </condition>
  26          </rule>
  27      <rule effect="permit">
  28              <condition>
  29
  30                            <environment-match attr="resource-id">device.simcard</environment-match>
  31                <environment-match attr="r8v2" match="2" />
  32                <environment-match attr="author" match="author3" />
  33                            <environment-match attr="r9a.scheme" match="http://onet.pl:80/test.html" />
  34                <environment-match attr="r9b.authority" match="http://onet.pl:80/test.html" />
  35                <environment-match attr="r9c.scheme-authority" match="http://onet.pl" />
  36
  37                         </condition>
  38          </rule>
  39       <rule effect="permit">
  40              <condition>
  41                <resource-match attr="resource-id">device.simcard</resource-match>
  42                <resource-match attr="r8v2" match="2" />
  43                <resource-match attr="author" match="author3" />
  44                            <resource-match attr="r9a.scheme" match="http://onet.pl:80/test.html" />
  45                <resource-match attr="r9b.authority" match="http://onet.pl:80/test.html" />
  46                <resource-match attr="r9c.scheme-authority" match="http://onet.pl" />
  47
  48                 </condition>
  49          </rule>
  50
  51  </policy>
  52
  53
  54 </policy-set>