Create allow/deny policies for vpn policy.

docker · Sep 28, 2018 · 1204bae · 1204bae
1 parent 38dea55
commit 1204bae
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/ex401/ex401.1.3/container_files/seed-data/bootstrap.gsh b/ex401/ex401.1.3/container_files/seed-data/bootstrap.gsh
@@ -5,7 +5,11 @@ addStem("app:vpn", "ref", "ref");
 
 addGroup("app:vpn:ref", "vpn_adhoc", "vpn_adhoc");
 addGroup("app:vpn", "vpn_authorized", "vpn_authorized");
+addGroup("app:vpn", "vpn_allow", "vpn_allow");
+addGroup("app:vpn", "vpn_deny", "vpn_deny");
 
-addMember("app:vpn:vpn_authorized", "ref:faculty");
-addMember("app:vpn:vpn_authorized", "ref:staff");
-addMember("app:vpn:vpn_authorized", "app:vpn:ref:vpn_adhoc");
+addMember("app:vpn:vpn_allow", "ref:faculty");
+addMember("app:vpn:vpn_allow", "ref:staff");
+addMember("app:vpn:vpn_allow", "app:vpn:ref:vpn_adhoc");
+
+addComposite("app:vpn:vpn_authorized", CompositeType.COMPLEMENT, "app:vpn:vpn_allow", "app:vpn:vpn_deny");