tests/ace/test-configuration/attr_policy-example5.xml

   1 <policy-set id="Policy-3" combine="deny-overrides">
   2
   3  <policy>
   4           <target>
   5              <subject>
   6                  <subject-match attr="name" match="analogclock"/>
   7                  <subject-match attr="uri.host" match="freebeer.evil.com" />
   8                  <subject-match attr="key-root-trust" match="manufacturer" />
   9                  <subject-match attr="id" match="urn:megacorp:widget:anapp" />
  10                  <subject-match attr="signer-id" match="7zha89%49xL$" />
  11                  <subject-match attr="version" match="5"/>
  12
  13           </subject>
  14          </target>
  15       <rule effect="permit">
  16              <condition>
  17                <resource-match attr="resource-id">device.simcard</resource-match>
  18                <resource-match attr="r8v2" match="2" />
  19                <resource-match attr="author" match="author3" />
  20                <resource-match attr="r9a.scheme" match="http://onet.pl:80/test.html" />
  21                <resource-match attr="r9b.authority" match="http://onet.pl:80/test.html" />
  22                <resource-match attr="r9c.scheme-authority" match="http://onet.pl" />
  23
  24                <environment-match attr="resource-id">device.simcard</environment-match>
  25                <environment-match attr="r8v2" match="2" />
  26                <environment-match attr="author" match="author3" />
  27                <environment-match attr="r9a.scheme" match="http://onet.pl:80/test.html" />
  28                <environment-match attr="r9b.authority" match="http://onet.pl:80/test.html" />
  29                <environment-match attr="r9c.scheme-authority" match="http://onet.pl" />
  30
  31                <subject-match attr="resource-id">device.simcard</subject-match>
  32                <subject-match attr="r8v2" match="2" />
  33                <subject-match attr="author" match="author3" />
  34                <subject-match attr="r9a.scheme" match="http://onet.pl:80/test.html" />
  35                <subject-match attr="r9b.authority" match="http://onet.pl:80/test.html" />
  36                <subject-match attr="r9c.scheme-authority" match="http://onet.pl" />
  37
  38             </condition>
  39          </rule>
  40      </policy>
  41
  42
  43 </policy-set>