next up previous contents index
Next: 11.4.5 set_auditallow: Enable or Up: 11.4 oskit_avc_ss: AVC Interface Previous: 11.4.3 revoke: Revoke previously

11.4.4 reset: Reset the cache and recheck all retained permissions

 

SYNOPSIS

#include <oskit/flask/avc_ss.h>

OSKIT_COMDECL oskit_avc_ss_reset(oskit_avc_ss_t *avc, oskit_u32_t seqno);

DESCRIPTION

The oskit_avc_ss_reset function flushes the cache and revalidates all permissions retained in the state of the object managers. This function invalidates all entries in the cache. It then calls any callbacks registered by an object manager for the OSKIT_AVC_CALLBACK_RESET event. Each callback is expected to revalidate permissions that are retained in the state of the object manager by calling oskit_avc_has_perm_ref or one of its variants. This function updates the latest policy change sequence number to the greater of its current value and the seqno value.

PARAMETERS

avc
The access vector cache.
seqno
The sequence number for the policy change.

RETURNS

Returns 0 on success, or an error code specified in <oskit/error.h>, on error.



Utah Flux Research Group