Next: 11.2.1 compute_av: Compute access
Up: 11 Flask Security Framework
Previous: 11.1 flask_types.h: basic Flask
The oskit_security interface specifies the methods
provided by a security server component for obtaining security
decisions. The
oskit_security COM interface inherits from IUnknown, and has
the following additional methods:
- compute_av
-
Compute access vectors.
- notify_perm
-
Notify of completed operations.
- transition_sid
-
Compute a SID for a new object.
- member_sid
-
Compute the SID of a member in a polyinstantiated object.
- sid_to_context
-
Obtain the security context for a given SID.
- context_to_sid
-
Obtain a SID for a given security context.
- register_avc
-
Register an AVC component for policy change notifications.
- unregister_avc
-
Unregister an AVC component.
- load_policy
-
Load a new policy configuration.
- fs_sid
-
Obtain the SIDs for an unlabeled file system.
- port_sid
-
Obtain the SID of a port number.
- netif_sid
-
Obtain the SIDs of a network interface.
- node_sid
-
Obtain the SID of a network node.
Utah Flux Research Group