next up previous contents index
Next: 11.4.1 grant: Grant previously Up: 11 Flask Security Framework Previous: 11.3.6 log_stats: Log the

11.4 oskit_avc_ss: AVC Interface for the Security Server

   

The oskit_avc_ss interface specifies the methods provided by an AVC component to the security server. These methods are used by the security server to manage the cache as needed for policy changes. The oskit_avc_ss COM interface inherits from IUnknown, and has the following additional methods:

grant
Grant previously denied permissions.
try_revoke
Revoke previously granted permissions if those permissions are not retained in the state of the object manager. Return any retained permissions.
revoke
Revoke previously granted permissions.
reset
Reset the cache to its initial state and recheck all retained permissions.
set_auditallow
Enable or disable the auditing of granted permissions.
set_auditdeny
Enable or disable the auditing of denied permissions.
set_notify
Enable or disable the notification of used permissions.





Utah Flux Research Group