get {sid : <Sid>, key : <Key>}
It returns the value of the specified key from the base instance of the table associated with the sid resource.
It returns a value of the Value type.
It runs incorrectly in the following cases:
key is not in the table associated with the sid resource.sid resource is not associated with a table from the tables pool of the StaticMap security model object being used.sid value is outside of the permissible range.When the expression runs incorrectly, the Kaspersky Security Module returns the "denied" decision.
Example:
/* A process of the Server class will receive the "allowed" decision from
* the Kaspersky Security Module by calling the
* Get security interface method if the value of key k1 in the base
* instance of the table associated with this process
* is not zero. Otherwise a process of the Server class will receive
* the "denied" decision from the security module
* by calling the Get security interface method. */
security src=Server, method=Get {
assert(m.get {sid : src_sid, key : "k1"} != 0)
}
Page top