mei_rt2mei_rt2_fix_1meiyap-rt1rt2
Last change
on this file since c469edf was
c469edf,
checked in by Mei <mei@…>, 13 years ago
|
1) add examples/runall
2) modified examples/DIR/rr to
use pwd instead of wired directory path
|
-
Property mode set to
100755
|
File size:
1.2 KB
|
Line | |
---|
1 | |
---|
2 | rm -rf creds_dump |
---|
3 | |
---|
4 | pwd=`pwd` |
---|
5 | |
---|
6 | #eloc=/home/mei/Deter/abac/libabac |
---|
7 | eloc=$pwd/../../libabac |
---|
8 | #keyloc=/home/mei/Deter/abac/examples/access_rt2_typed |
---|
9 | keyloc=$pwd |
---|
10 | |
---|
11 | alpha=`creddy --keyid --cert $keyloc/Alpha_ID.pem` |
---|
12 | bob=`creddy --keyid --cert $keyloc/Bob_ID.pem` |
---|
13 | joe=`creddy --keyid --cert $keyloc/Joe_ID.pem` |
---|
14 | |
---|
15 | bob_prin="[keyid:$bob]" |
---|
16 | |
---|
17 | access_fileA="[keyid:$alpha].role:access([string:'read'],[urn:'file//fileA'])" |
---|
18 | team_proj2="[keyid:$alpha].role:team([string:'proj2'])" |
---|
19 | bob_prin="[keyid:$bob]" |
---|
20 | joe_prin="[keyid:$joe]" |
---|
21 | |
---|
22 | ## dump all credentials -- does not work |
---|
23 | $eloc/abac_prover_yap --keystore $keyloc --dump creds_dump |
---|
24 | |
---|
25 | #[keyid:Alpha].role:access([string:'read'],[urn:'file//fileA']) <-?- [keyid:bob] (yes) |
---|
26 | echo "===good============ Alpha.access(read,fileA)<-?-Bob yap " |
---|
27 | $eloc/abac_prover_yap --keystore $keyloc --role "$access_fileA" --principal "$bob_prin" |
---|
28 | |
---|
29 | echo "===bad============ Alpha.access(read,fileA)<-?-Joe yap " |
---|
30 | $eloc/abac_prover_yap --keystore $keyloc --role "$access_fileA" --principal "$joe_prin" |
---|
31 | |
---|
32 | echo "===good============ Alpha.team(proj2)<-?-Joe yap " |
---|
33 | #[keyid:alpha].oset:team([string:'proj2'])<-[keyid:Joe] |
---|
34 | $eloc/abac_prover_yap --keystore $keyloc --role "$team_proj2" --principal "$joe_prin" |
---|
35 | |
---|
Note: See
TracBrowser
for help on using the repository browser.