if-global-variable

Performs a test on a global configuration variable. The type of test performed depends on the operator specified by the op attribute. The following table shows the type of test performed by each operator.

Remarks

Operator

Returns true when...

available

There is a global configuration variable with the specified name.

equal

There is a global configuration variable with the specified name and its value equals the content of <if-global-variable> when compared using the specified comparison mode. Supports variable expansion.

lt

There is a global configuration variable with the specified name and its value is less than the content of the condition when compared using the specified comparison mode. Supports variable expansion.

gt

There is a global configuration variable with the specified name and its value is greater than the content of the condition when compared using the specified comparison mode. Supports variable expansion.

not-available

Available returns false.

not-equal

Equal returns false.

not-lt

Less than returns false.

not-gt

Greater than returns false.

Example

<if-global-variable op="available" name="myGlobalVariable"/><if-global-variable op="equal" mode="nocase"name="myGlobalVariable">enabled</if-global-variable>

Allowed Content

#PCDATA

Attributes

Attribute

Possible Values

Default Value

disabled

true | false

True if this element is disabled.

false

mode

case | nocase | regex | src-dn | dest-dn | numeric | octet

comparison mode if op implies a comparison.

nocase

name

CDATA

Name of the variable. Supports variable expansion.

#REQUIRED

notrace

true | false

True if this element should not be traced during execution of the policy.

false

op

available | equal | lt | gt | not-available | not-equal | not-lt | not-gt

Test operator.

#REQUIRED

Content Rule

( #PCDATA )

Parent Elements

Element

Description

and

Logical conjunction.

or

Logical disjunction.