mirror of
https://github.com/microsoft/regorus.git
synced 2026-08-05 02:16:11 +00:00
fb5151e0e4
- Created an example of extension policy - Added C# binding support of .NET framework 4.0 and created a Nuget spec for it. - Added a pytest in python bindings to test the extension policy and the python binding - Restructured the example and Csharp binding directories due to above changes. - Added copyrights. - Added a Windows workflow for .NET 4.0 build and test.
26 lines
1.4 KiB
Rego
26 lines
1.4 KiB
Rego
package example
|
|
|
|
default allow := false # unless otherwise defined, allow is false
|
|
|
|
allow := true { # allow is true if...
|
|
count(violation) == 0 # there are zero violations.
|
|
}
|
|
|
|
violation[server.id] { # a server is in the violation set if...
|
|
some server
|
|
public_server[server] # it exists in the 'public_server' set and...
|
|
server.protocols[_] == "http" # it contains the insecure "http" protocol.
|
|
}
|
|
|
|
violation[server.id] { # a server is in the violation set if...
|
|
server := input.servers[_] # it exists in the input.servers collection and...
|
|
server.protocols[_] == "telnet" # it contains the "telnet" protocol.
|
|
}
|
|
|
|
public_server[server] { # a server exists in the public_server set if...
|
|
some i, j
|
|
server := input.servers[_] # it exists in the input.servers collection and...
|
|
server.ports[_] == input.ports[i].id # it references a port in the input.ports collection and...
|
|
input.ports[i].network == input.networks[j].id # the port references a network in the input.networks collection and...
|
|
input.networks[j].public # the network is public.
|
|
} |