/usr/include/arc/security/ArcPDP/Result.h is in nordugrid-arc-dev 4.2.0-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 | namespace ArcSec {
///Evaluation result
typedef enum {
/**Permit*/
DECISION_PERMIT = 0,
/**Deny*/
DECISION_DENY = 1,
/**Indeterminate, because of the Indeterminate from the "Matching"*/
DECISION_INDETERMINATE = 2,
/**Not_Applicable, means the the request tuple <Subject, Resource, Action, Context> does not match the rule. So there is no way to get to the "Permit"/"Deny" effect. */
DECISION_NOT_APPLICABLE = 3
} Result;
inline std::ostream& operator<<(std::ostream& o,Result r) {
switch(r) {
case DECISION_PERMIT: return o<<"Permit";
case DECISION_DENY: return o<<"Deny";
case DECISION_INDETERMINATE: return o<<"Indeterminate";
case DECISION_NOT_APPLICABLE: return o<<"Not Applicable";
};
return o<<"Undefined";
}
///Match result
enum MatchResult {
/**Match, the request tuple <Subject, Resource, Action, Context> matches the rule*/
MATCH = 0,
/**No_Match, the request tuple <Subject, Resource, Action, Context> does not match the rule*/
NO_MATCH = 1,
/**Indeterminate, means that the request tuple <Subject, Resource, Action, Context> matches the
rule, but in terms of the other "Condition", the tuple does not match. So far, the Indeterminate has
no meaning in the existing code (will never be switched to)*/
INDETERMINATE = 2
};
///Struct to record the xml node and effect, which will be used by Evaluator to get the information about which rule/policy(in xmlnode) is satisfied
typedef struct {
Arc::XMLNode node;
std::string effect;
} EvalResult;
}
|