tests/ace/test-configuration/attr_policy-example1.xml

   1  <policy-set id="Policy-1" combine="first-matching-target">
   2
   3
   4         <policy>
   5           <target>
   6              <subject>
   7                  <subject-match attr="uri.host" match="freebeer.evil.com" />
   8                                 <subject-match attr="version" match="4" />
   9
  10           </subject>
  11          </target>
  12       <rule effect="permit">
  13              <condition>
  14                                 <resource-match attr="r8v2" match="2" />
  15              </condition>
  16          </rule>
  17
  18      </policy>
  19
  20
  21
  22         <policy>
  23           <target>
  24              <subject>
  25                  <subject-match attr="key-root-trust" match="manufacturer" />
  26
  27           </subject>
  28          </target>
  29       <rule effect="permit">
  30              <condition>
  31                                         <resource-match attr="author" match="author3" />
  32             </condition>
  33          </rule>
  34
  35      </policy>
  36
  37         <policy>
  38           <target>
  39              <subject>
  40                  <subject-match attr="id" match="urn:megacorp:widget:anapp" />
  41
  42           </subject>
  43          </target>
  44       <rule effect="permit">
  45              <condition>
  46                                         <resource-match attr="r9a.scheme" match="http://onet.pl:80/test.html" />
  47             </condition>
  48          </rule>
  49
  50      </policy>
  51
  52         <policy>
  53           <target>
  54              <subject>
  55                 <subject-match attr="signer-id" match="7zha89%49x£$" />
  56
  57           </subject>
  58          </target>
  59       <rule effect="permit">
  60              <condition>
  61                                 <resource-match attr="r9b.authority" match="http://onet.pl:80/test.html" />
  62              </condition>
  63          </rule>
  64
  65      </policy>
  66
  67         <policy>
  68           <target>
  69              <subject>
  70                  <subject-match attr="id" match="urn:megacorp:widget:anapp" />
  71
  72           </subject>
  73          </target>
  74       <rule effect="permit">
  75              <condition>
  76                                         <resource-match attr="r9a.scheme" match="http://onet.pl:80/test.html" />
  77             </condition>
  78          </rule>
  79
  80      </policy>
  81
  82         <policy>
  83           <target>
  84              <subject>
  85                 <subject-match attr="signer-id" match="7zha89%49x£$" />
  86
  87           </subject>
  88          </target>
  89       <rule effect="permit">
  90              <condition>
  91                         <resource-match attr="r9c.scheme-authority" match="http://onet.pl" />
  92                          </condition>
  93          </rule>
  94
  95      </policy>
  96
  97     </policy-set>