diff options
author | RHE <rebirthmonkey@gmail.com> | 2017-12-26 15:38:11 +0100 |
---|---|---|
committer | RHE <rebirthmonkey@gmail.com> | 2017-12-26 15:38:11 +0100 |
commit | 69910cdd22ec3b27f3e1f608b317f9683de1dcf6 (patch) | |
tree | 93b38d646d4f42df1eef564ec887dad46356fd46 /moon_forming/conf/mls.py | |
parent | 454e9c5f8664ea99ccea2417b6cc3ffb238cf834 (diff) |
moon kubernetes review
Change-Id: I49a62f18ac6ecd06cdbc8e51b4e8ba00971ce6aa
Signed-off-by: RHE <rebirthmonkey@gmail.com>
Diffstat (limited to 'moon_forming/conf/mls.py')
-rw-r--r-- | moon_forming/conf/mls.py | 59 |
1 files changed, 0 insertions, 59 deletions
diff --git a/moon_forming/conf/mls.py b/moon_forming/conf/mls.py deleted file mode 100644 index 0e6285c9..00000000 --- a/moon_forming/conf/mls.py +++ /dev/null @@ -1,59 +0,0 @@ - -pdp_name = "pdp_mls" -policy_name = "MLS Policy example" -model_name = "MLS" -policy_genre = "authz" - -subjects = {"adminuser": "", "user1": "", "user2": "", } -objects = {"vm0": "", "vm1": "", } -actions = {"start": "", "stop": ""} - -subject_categories = {"subject-security-level": "", } -object_categories = {"object-security-level": "", } -action_categories = {"action-type": "", } - -subject_data = { - "subject-security-level": {"low": "", "medium": "", "high": ""}, -} -object_data = { - "object-security-level": {"low": "", "medium": "", "high": ""}, -} -action_data = {"action-type": {"vm-action": "", "storage-action": "", }} - -subject_assignments = { - "adminuser": {"subject-security-level": "high"}, - "user1": {"subject-security-level": "medium"}, -} -object_assignments = { - "vm0": {"object-security-level": "medium"}, - "vm1": {"object-security-level": "low"}, -} -action_assignments = { - "start": {"action-type": "vm-action"}, - "stop": {"action-type": "vm-action"} -} - -meta_rule = { - "mls": { - "id": "", - "value": ("subject-security-level", - "object-security-level", - "action-type")}, -} - -rules = { - "mls": ( - { - "rule": ("high", "medium", "vm-action"), - "instructions": ({"decision": "grant"}) - }, - { - "rule": ("high", "low", "vm-action"), - "instructions": ({"decision": "grant"}) - }, - { - "rule": ("medium", "low", "vm-action"), - "instructions": ({"decision": "grant"}) - }, - ) -} |