cenrep
version 1
[platsec]
# Testing that AlwaysPass and AlwaysFail followed by sid are recognized
# Default Policy
sid_rd=0 cap_rd=AlwaysPass sid_wr=0 cap_wr=AlwaysFail
# Range Policies
200 201 sid_rd=0 cap_rd=AllFiles,TCB,DRM sid_wr=0 cap_wr=WriteDeviceData,AllFiles,ReadDeviceData
300 301 cap_rd=ReadDeviceData,WriteDeviceData,LocalServices,NetworkServices,TCB,DRM,AllFiles cap_wr=ReadDeviceData,WriteDeviceData,LocalServices,NetworkServices,TCB,DRM,AllFiles


[main]
1 int 0 2147483648 cap_rd=ReadDeviceData,WriteDeviceData cap_wr=ReadDeviceData,WriteDeviceData

# Testing the max 3 caps when followed by sid
17 int 1 2147483648 sid_rd=0 cap_rd=AllFiles cap_wr=ReadDeviceData,WriteDeviceData,AllFiles

# Testing the max 7 caps when not followed by sid
18 int 1 2147483648 cap_rd=ReadDeviceData,WriteDeviceData,LocalServices,NetworkServices,TCB,DRM,AllFiles cap_wr=WriteDeviceData

# Testing that AlwaysFail is recognized when not followed by sid
21 int 1 2147483648 cap_rd=AlwaysFail

# Testing that AlwaysPass is recognized when not followed by sid
22 int 19 2147483648 cap_wr=AlwaysPass

# Testing that the single policies completely override the default policies
19 int 1 2147483648 sid_rd=0 cap_rd=AlwaysFail sid_wr=0 cap_wr=AlwaysPass

23 int 1 2147483648 cap_rd=ReadDeviceData cap_wr=WriteDeviceData

24 int 0 2147483648 cap_rd=ReadDeviceData cap_wr=WriteDeviceData

25 int 0 2147483648 cap_rd=ReadDeviceData cap_wr=WriteDeviceData

26 binary 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 2147483648 cap_rd=ReadDeviceData cap_wr=WriteDeviceData

# Testing using the max 3 caps for both read and write caps when followed by sid
28 int 5 2147483648 sid_rd=0 cap_rd=ReadDeviceData,TCB,DRM sid_wr=0 cap_wr=WriteDeviceData,ReadDeviceData,AllFiles

# Testing using the max 7 caps for both read and write caps without any sid
33 int 33 0 cap_rd=ReadDeviceData,WriteDeviceData,LocalServices,NetworkServices,TCB,DRM,AllFiles cap_wr=ReadDeviceData,WriteDeviceData,LocalServices,NetworkServices,TCB,DRM,AllFiles

29 binary - 2147483648 cap_rd=ReadDeviceData

30 int 1 2147483648 cap_rd=ReadDeviceData,WriteDeviceData cap_wr=ReadDeviceData,WriteDeviceData

200 int 200 0

201 int 201 0

300 int 300 0
301 int 301 0

# Testing what happen when single policies specified just with sid
400 int 400 0 sid_rd=0
401 int 401 0 sid_wr=0

# Testing that default policies are picked up when single policies are not specified
500 int 500 0
