⚠️ VeridianOS Kernel Documentation - This is low-level kernel code. All functions are unsafe unless explicitly marked otherwise. no_std

check_access_full

veridian_kernel::security::mac

Function check_access_full 

Source 
pub fn check_access_full(
    subject: &SecurityLabel,
    object: &SecurityLabel,
    access: AccessType,
) -> bool
Expand description

Check access with full security label (MAC + MLS + RBAC).

Performs three checks:

  1. MAC type enforcement (check_access)
  2. MLS dominance (subject must dominate object for read; object must dominate subject for write)
  3. RBAC: subject’s role must allow the source type