checkPolicy
Subclass API: Policy check.
This method is defined by a given subclass implementation of the VFS system, and is charged with evaluating guest I/O policy for a given request. This method is called by enforce when the request is deemed sane, and the policy check is the only remaining step.
Return
Response from the policy check, indicating whether the request is allowed.
Parameters
Type of access which are being requested.
Access domain for this request: is it coming from the guest, or the host?
Path to the file or directory being accessed.
Whether this path is known to be a file, or directory, or it is not known.
Subclass API: Policy check.
This method is defined by a given subclass implementation of the VFS system, and is charged with evaluating guest I/O policy for a given request. This method is called by enforce when the request is deemed sane, and the policy check is the only remaining step.
Return
Response from the policy check, indicating whether the request is allowed.
Parameters
Materialized I/O policy check request.