law deny_wins

bend-osdev-apparmor@0.1.0.0 · LAWS.bend:72

import Base
import bend-osdev-apparmor@0.1.0.0/perm.bend as P
import bend-osdev-apparmor@0.1.0.0/options.bend as O
import bend-osdev-apparmor@0.1.0.0/profile.bend as PR
import bend-osdev-apparmor@0.1.0.0/eval.bend as V

72law deny_wins:
73  for opts: O.AaOptions
74  for gs: List<&2, P.AaGrant>
75  for flags: PR.AaFlags
76  for req: P.AaPerms
77  for h1: {V.AaEval.deny_applies(opts, PR.AaFlags.mode(flags)) == True{} : Bool}
78  for h2: {P.AaPerms.meets(req, V.AaEval.denied(gs)) == True{} : Bool}
79  {V.AaDecision.allowed(V.AaEval.decide(opts, flags, req, gs)) == False{} : Bool}