Next: 11.4.1 grant: Grant previously
Up: 11 Flask Security Framework
Previous: 11.3.6 log_stats: Log the
The oskit_avc_ss interface specifies the methods
provided by an AVC component to the security server. These
methods are used by the security server to manage the cache as
needed for policy changes. The oskit_avc_ss COM interface
inherits from IUnknown, and has the following additional methods:
- grant
-
Grant previously denied permissions.
- try_revoke
-
Revoke previously granted permissions if those permissions are
not retained in the state of the object manager. Return any
retained permissions.
- revoke
-
Revoke previously granted permissions.
- reset
-
Reset the cache to its initial state and recheck all retained
permissions.
- set_auditallow
-
Enable or disable the auditing of granted permissions.
- set_auditdeny
-
Enable or disable the auditing of denied permissions.
- set_notify
-
Enable or disable the notification of used permissions.
Utah Flux Research Group