Changeset 38630 in vbox

Timestamp:

Sep 5, 2011 10:52:26 AM (14 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

73837

Message:

DrvIntNet: Check the RequireExactPolicyMatch and RequireAsRestrictivePolicy config options.

File:

• trunk/src/VBox/Devices/Network/DrvIntNet.cpp (modified) (1 diff)

trunk/src/VBox/Devices/Network/DrvIntNet.cpp

@@ -1455 +1455 @@
                                 N_("Configuration error: Failed to get the \"RestrictAccess\" value"));
 
+    /** @cfgm{RequireExactPolicyMatch, boolean, false}
+     * Whether to require that the current security and promiscuous policies of
+     * the network is exactly as the ones specified in this open network
+     * request.  Use this with RequireAsRestrictivePolicy to prevent
+     * restrictions from being lifted.  If no further policy changes are
+     * desired, apply the relevant fixed flags. */
+    rc = CFGMR3QueryBoolDef(pCfg, "RequireExactPolicyMatch", &f, false);
+    if (RT_FAILURE(rc))
+        return PDMDRV_SET_ERROR(pDrvIns, rc,
+                                N_("Configuration error: Failed to get the \"RequireExactPolicyMatch\" value"));
+    if (f)
+        OpenReq.fFlags |= INTNET_OPEN_FLAGS_REQUIRE_EXACT;
+
+    /** @cfgm{RequireAsRestrictivePolicy, boolean, false}
+     * Whether to require that the security and promiscuous policies of the
+     * network is at least as restrictive as specified this request specifies
+     * and prevent them  being lifted later on.
+     */
+    rc = CFGMR3QueryBoolDef(pCfg, "RequireAsRestrictivePolicy", &f, false);
+    if (RT_FAILURE(rc))
+        return PDMDRV_SET_ERROR(pDrvIns, rc,
+                                N_("Configuration error: Failed to get the \"RequireAsRestrictivePolicy\" value"));
+    if (f)
+        OpenReq.fFlags |= INTNET_OPEN_FLAGS_REQUIRE_AS_RESTRICTIVE_POLICIES;
 
     /** @cfgm{AccessPolicy, string, "none"}