mei_rt2mei_rt2_fix_1meiyap-rt1rt2
|
Last change
on this file since e88c95b was
e88c95b,
checked in by Mei <mei@…>, 12 years ago
|
|
1) switch the order of terms within the rule clause.
carl said more specific should be at the earlier part of rule so
it won't backtrack to death.
2) unset some debug flag in creddy
|
-
Property mode set to
100755
|
|
File size:
984 bytes
|
| Line | |
|---|
| 1 | |
|---|
| 2 | rm -rf creds_dump |
|---|
| 3 | |
|---|
| 4 | eloc=/home/mei/Deter/abac/libabac |
|---|
| 5 | keyloc=/home/mei/Deter/abac/examples/file_read_rt2_typed |
|---|
| 6 | |
|---|
| 7 | alpha=`creddy --keyid --cert $keyloc/Alpha_ID.pem` |
|---|
| 8 | bob=`creddy --keyid --cert $keyloc/Bob_ID.pem` |
|---|
| 9 | maryann=`creddy --keyid --cert $keyloc/Maryann_ID.pem` |
|---|
| 10 | alpha=`creddy --keyid --cert $keyloc/Alpha_ID.pem` |
|---|
| 11 | |
|---|
| 12 | read_fileA="[keyid:$alpha].role:read([urn:'file://fileA'])" |
|---|
| 13 | bob_prin="[keyid:$bob]" |
|---|
| 14 | maryann_prin="[keyid:$maryann]" |
|---|
| 15 | |
|---|
| 16 | ## dump all credentials -- does not seem to work |
|---|
| 17 | $eloc/abac_prover_yap --keystore $keyloc --dump creds_dump |
|---|
| 18 | |
|---|
| 19 | #[keyid:Alpha].role:read([urn:'file://fileA']) <-?- [keyid:Bob] (yes) |
|---|
| 20 | echo "===good============ alpha.read(fileA) <- Bob yap " |
|---|
| 21 | $eloc/abac_prover_yap --keystore $keyloc --role "$read_fileA" --principal "$bob_prin" |
|---|
| 22 | |
|---|
| 23 | #[keyid:Alpha].role:read([urn:'file://fileA']) <-?- [keyid:Maryann] (no) |
|---|
| 24 | echo "===bad============ alpha.read(fileA) <- Maryann yap " |
|---|
| 25 | $eloc/abac_prover_yap --keystore $keyloc --role "$read_fileA" --principal "$maryann_prin" |
|---|
| 26 | |
|---|
Note: See
TracBrowser
for help on using the repository browser.
