tests/ace/test-configuration/policy-example.xml

   1  <policy-set id="Policy-1" combine="first-matching-target">
   2      <!---
   3      <policy>
   4          <rule effect="permit"/>
   5      </policy>
   6      -->
   7     <policy>
   8           <target>
   9              <subject>
  10                  <subject-match attr="name" match="analogclock"/>
  11              </subject>
  12          </target>
  13           <rule effect="permit">
  14              <condition>
  15                  <resource-match attr="api-feature">
  16                      devicestatus
  17                  </resource-match>
  18                  <!--
  19                  <resource-match attr="feature-install-uri">
  20                      ww.samsung.com1
  21                  </resource-match>
  22                  -->
  23              </condition>
  24          </rule>
  25      </policy>
  26
  27     <policy>
  28           <target>
  29              <subject>
  30                  <subject-match attr="name" match="batteryMonitor"/>
  31              </subject>
  32          </target>
  33           <rule effect="permit">
  34           <condition>
  35                  <resource-match attr="api-feature">
  36                      devicestatus
  37                  </resource-match>
  38              </condition>
  39          </rule>
  40      </policy>
  41
  42     <policy>
  43           <target>
  44              <subject>
  45                  <subject-match attr="name" match="appconfig"/>
  46              </subject>
  47          </target>
  48           <rule effect="deny">
  49              <condition>
  50                  <resource-match attr="api-feature">
  51                      http://bondi.omtp.org/api.appconfig
  52                  </resource-match>
  53              </condition>
  54          </rule>
  55      </policy>
  56
  57
  58      <policy>
  59          <rule effect="permit"/>
  60      </policy>
  61
  62
  63      <policy>
  64          <target>
  65              <subject>
  66                  <subject-match attr="name" match="memo" />
  67              </subject>
  68          </target>
  69          <rule effect="permit">
  70              <condition>
  71                  <resource-match attr="resource-id">
  72                     file.write
  73                  </resource-match>
  74                  <subject-match attr="name" match="memo" />
  75              </condition>
  76          </rule>
  77      </policy>
  78
  79      <policy>
  80          <target>
  81              <subject>
  82                  <subject-match attr="name" match="phonesearch" />
  83              </subject>
  84          </target>
  85          <rule effect="permit">
  86              <condition>
  87                  <resource-match attr="resource-id">
  88                      pim.contact
  89                  </resource-match>
  90                  <subject-match attr="name" match="phonesearch" />
  91              </condition>
  92          </rule>
  93      </policy>
  94
  95  </policy-set>