home *** CD-ROM | disk | FTP | other *** search
Wrap
<?xml version="1.0"?> <!-- ======================================================================== filename: ws_device.xsl copyright(c): Tiny Software corp 2004 (http://www.tinysoftware.com) author: Petr Soukup ======================================================================== --> <xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0" > <!-- ************************************************************************ INCLUDE SECTION ************************************************************************ --> <!--=================================================================--> <xsl:template match="/"> <!--=================================================================--> <xsl:apply-templates select="/SecDb/RuleList"/> </xsl:template> <!--=================================================================--> <xsl:template match="RuleList"> <!--=================================================================--> <p> <b>Audit level for Prevented access: </b> <select id="SelAuditLevel" onchange="changeAuditLevel()"> <xsl:choose> <xsl:when test="Rule[@ot='Device' and AccessDesc/@ar='Prevent' and AccessDesc/@al='Ignore']"> <option value="monitor">Monitor</option> <option value="ignore" selected="selected">Ignore</option> </xsl:when> <xsl:otherwise> <option value="monitor" selected="selected">Monitor</option> <option value="ignore">Ignore</option> </xsl:otherwise> </xsl:choose> </select> </p> <p> <b>Prevent access to the following devices:</b> <ul class="DeviceControl"> <li> <xsl:element name="input"> <xsl:attribute name="type">checkbox</xsl:attribute> <xsl:attribute name="name">checkDevicesCtrl</xsl:attribute> <xsl:attribute name="onclick">changeRules(this)</xsl:attribute> <xsl:if test="Rule[@ot='Device' and Object='Tcpip\DevN\*\RawIp' and AccessDesc/@ar='Prevent']"> <xsl:attribute name="checked">checked</xsl:attribute> </xsl:if> <xsl:attribute name="objects">Tcpip\DevN\*\RawIp|Tcpip\DevN\*\IPMULTICAST|Tcpip\DevN\*\Ip|Ndisuio\DevN\*\</xsl:attribute> <xsl:attribute name="rules"> <xsl:for-each select="Rule[@ot='Device' and (Object='Tcpip\DevN\*\RawIp' or Object='Tcpip\DevN\*\IPMULTICAST' or Object='Tcpip\DevN\*\Ip' or Object='Ndisuio\DevN\*\')]"> <xsl:value-of select="@id"/> <xsl:if test="position()!=last()"><xsl:text>|</xsl:text></xsl:if> </xsl:for-each> </xsl:attribute> </xsl:element> <xsl:text>Raw IP packets (except Trusted applications)</xsl:text> </li> <li> <xsl:element name="input"> <xsl:attribute name="type">checkbox</xsl:attribute> <xsl:attribute name="name">checkDevicesCtrl</xsl:attribute> <xsl:attribute name="onclick">changeRules(this)</xsl:attribute> <xsl:if test="Rule[@ot='Device' and Object='Disk\Link\*\usbstor*' and AccessDesc/@ar='Prevent']"> <xsl:attribute name="checked">checked</xsl:attribute> </xsl:if> <xsl:attribute name="objects">Disk\Link\*\usbstor*</xsl:attribute> <xsl:attribute name="rules"> <xsl:for-each select="Rule[@ot='Device' and (Object='Disk\Link\*\usbstor*')]"> <xsl:value-of select="@id"/> <xsl:if test="position()!=last()"><xsl:text>|</xsl:text></xsl:if> </xsl:for-each> </xsl:attribute> </xsl:element> <xsl:text>USB drives</xsl:text> </li> <li> <xsl:element name="input"> <xsl:attribute name="type">checkbox</xsl:attribute> <xsl:attribute name="name">checkDevicesCtrl</xsl:attribute> <xsl:attribute name="onclick">changeRules(this)</xsl:attribute> <xsl:if test="Rule[@ot='Device' and (Object='Disk\Link\*\Sbp2*') and AccessDesc/@ar='Prevent']"> <xsl:attribute name="checked">checked</xsl:attribute> </xsl:if> <xsl:attribute name="objects">Disk\Link\*\Sbp2*</xsl:attribute> <xsl:attribute name="rules"> <xsl:for-each select="Rule[@ot='Device' and (Object='Disk\Link\*\Sbp2*')]"> <xsl:value-of select="@id"/> <xsl:if test="position()!=last()"><xsl:text>|</xsl:text></xsl:if> </xsl:for-each> </xsl:attribute> </xsl:element> <xsl:text>FireWire Drives</xsl:text> </li> <li> <xsl:element name="input"> <xsl:attribute name="type">checkbox</xsl:attribute> <xsl:attribute name="name">checkDevicesCtrl</xsl:attribute> <xsl:attribute name="onclick">changeRules(this)</xsl:attribute> <xsl:if test="Rule[@ot='Device' and Object='*\Link\Modem\*' and AccessDesc/@ar='Prevent']"> <xsl:attribute name="checked">checked</xsl:attribute> </xsl:if> <xsl:attribute name="objects">*\Link\Modem\*</xsl:attribute> <xsl:attribute name="account">system</xsl:attribute> <xsl:attribute name="rules"> <xsl:for-each select="Rule[@ot='Device' and Object='*\Link\Modem\*']"> <xsl:value-of select="@id"/> <xsl:if test="position()!=last()"><xsl:text>|</xsl:text></xsl:if> </xsl:for-each> </xsl:attribute> </xsl:element> <xsl:text>Modems</xsl:text> </li> <li> <xsl:element name="input"> <xsl:attribute name="type">checkbox</xsl:attribute> <xsl:attribute name="name">checkDevicesCtrl</xsl:attribute> <xsl:attribute name="onclick">changeRules(this)</xsl:attribute> <xsl:if test="Rule[@ot='Device' and (Object='irda\DevN\*\' or Object='*\Link\Infrared\*') and AccessDesc/@ar='Prevent']"> <xsl:attribute name="checked">checked</xsl:attribute> </xsl:if> <xsl:attribute name="objects">irda\DevN\*\|*\Link\Infrared\*</xsl:attribute> <xsl:attribute name="account">system</xsl:attribute> <xsl:attribute name="rules"> <xsl:for-each select="Rule[@ot='Device' and (Object='irda\DevN\*\' or Object='*\Link\Infrared\*')]"> <xsl:value-of select="@id"/> <xsl:if test="position()!=last()"><xsl:text>|</xsl:text></xsl:if> </xsl:for-each> </xsl:attribute> </xsl:element> <xsl:text>Infrared</xsl:text> </li> <li> <xsl:element name="input"> <xsl:attribute name="type">checkbox</xsl:attribute> <xsl:attribute name="name">checkDevicesCtrl</xsl:attribute> <xsl:attribute name="onclick">changeRules(this)</xsl:attribute> <xsl:if test="Rule[@ot='Device' and Object='*\Link\Ports\*' and AccessDesc/@ar='Prevent']"> <xsl:attribute name="checked">checked</xsl:attribute> </xsl:if> <xsl:attribute name="objects">*\Link\Ports\*</xsl:attribute> <xsl:attribute name="account">system</xsl:attribute> <xsl:attribute name="rules"> <xsl:for-each select="Rule[@ot='Device' and Object='*\Link\Ports\*']"> <xsl:value-of select="@id"/> <xsl:if test="position()!=last()"><xsl:text>|</xsl:text></xsl:if> </xsl:for-each> </xsl:attribute> </xsl:element> <xsl:text>Serial and parallel ports</xsl:text> </li> <li> <xsl:element name="input"> <xsl:attribute name="type">checkbox</xsl:attribute> <xsl:attribute name="name">checkDevicesCtrl</xsl:attribute> <xsl:attribute name="onclick">changeRules(this)</xsl:attribute> <xsl:if test="Rule[@ot='Device' and Object='*\Link\FloppyDisk\*' and AccessDesc/@ar='Prevent']"> <xsl:attribute name="checked">checked</xsl:attribute> </xsl:if> <xsl:attribute name="objects">*\Link\FloppyDisk\*</xsl:attribute> <xsl:attribute name="account">system</xsl:attribute> <xsl:attribute name="rules"> <xsl:for-each select="Rule[@ot='Device' and Object='*\Link\FloppyDisk\*']"> <xsl:value-of select="@id"/> <xsl:if test="position()!=last()"><xsl:text>|</xsl:text></xsl:if> </xsl:for-each> </xsl:attribute> </xsl:element> <xsl:text>Floppy disks</xsl:text> </li> <li> <xsl:element name="input"> <xsl:attribute name="type">checkbox</xsl:attribute> <xsl:attribute name="name">checkDevicesCtrl</xsl:attribute> <xsl:attribute name="onclick">changeRules(this)</xsl:attribute> <xsl:if test="Rule[@ot='Device' and Object='*\Link\CDROM\*' and AccessDesc/@ar='Prevent']"> <xsl:attribute name="checked">checked</xsl:attribute> </xsl:if> <xsl:attribute name="objects">*\Link\CDROM\*</xsl:attribute> <xsl:attribute name="account">system</xsl:attribute> <xsl:attribute name="rules"> <xsl:for-each select="Rule[@ot='Device' and Object='*\Link\CDROM\*']"> <xsl:value-of select="@id"/> <xsl:if test="position()!=last()"><xsl:text>|</xsl:text></xsl:if> </xsl:for-each> </xsl:attribute> </xsl:element> <xsl:text>CD-ROMS</xsl:text> </li> <li> <xsl:element name="input"> <xsl:attribute name="type">checkbox</xsl:attribute> <xsl:attribute name="name">checkDevicesCtrl</xsl:attribute> <xsl:attribute name="onclick">changeRules(this)</xsl:attribute> <xsl:if test="Rule[@ot='Device' and Object='DangerousIoctl\*' and @app='*' and AccessDesc/@ar='Prevent']"> <xsl:attribute name="checked">checked</xsl:attribute> </xsl:if> <xsl:attribute name="objects">DangerousIoctl\*</xsl:attribute> <xsl:attribute name="rules"> <xsl:for-each select="Rule[@ot='Device' and Object='DangerousIoctl\*' and @app='*']"> <xsl:value-of select="@id"/> <xsl:if test="position()!=last()"><xsl:text>|</xsl:text></xsl:if> </xsl:for-each> </xsl:attribute> </xsl:element> <xsl:text>Dangerous Disk Control – format, mount… (except Trusted applications)</xsl:text> </li> </ul> </p> </xsl:template> </xsl:stylesheet>