stemflow 0.5.3

Access-control policy engine used by StemJail
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

// Copyright (C) 2015 Mickaël Salaün
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Lesser General Public License as published by
// the Free Software Foundation, version 3 of the License.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU Lesser General Public License for more details.
//
// You should have received a copy of the GNU Lesser General Public License
// along with this program. If not, see <http://www.gnu.org/licenses/>.

#![cfg(not(test))]

#[macro_use(let_dom, new_acl)]
extern crate stemflow;

use stemflow::{FileAccess, RefAccess, ResPool, absolute_path};

fn main() {
    let mut pool = ResPool::new();
    let_dom!(pool, dom1, new_acl!(
        new_ro "/home/doc",
        new_rw "/home/x",
        new_rw "/home/z",
        new_ro "/usr",
        new_rw "/tmp"
    ));
    println!("dom1: {:?}", dom1);

    let_dom!(pool, dom2, new_acl!(
        new_rw "/home/doc/foo",
        new_ro "/home",
        new_ro "/home/z",
        new_ro "/usr",
        new_rw "/tmp"
    ));
    println!("dom2: {:?}", dom2);

    let want1 = new_acl!(new_rw "/home/doc/foo/bar");
    println!("want1: {:?}", want1);
    println!("allow: {:?}", match pool.allow(&want1.clone()) {
        Some(d) => d.name.clone(),
        None => "-".to_string(),
        });
}