if-local-variable

Performs a test on a local variable. The type of test performed depends on the operator specified by the op attribute. The following table shows the type of test performed by each operator. If local variable holds a node set, the string value of each node in the node set is used for comparison purposes. If the same local variable exists in both the policy scope and the driver scope, the variable in the policy scope takes precedence.

Remarks

Operator

Returns true when...

available

There is a local variable with the specified name that has been defined by an action of an earlier <rule> within the <policy>.

equal

There is a local variable with the specified name and its value equals the content of <if-local-variable> when compared using the specified comparison mode. Supports variable expansion.

lt

There is a local variable with the specified name and its value is less than the content of the condition when compared using the specified comparison mode. Supports variable expansion.

gt

There is a local variable with the specified name and its value is greater than the content of the condition when compared using the specified comparison mode. Supports variable expansion.

not-available

Available returns false.

not-equal

Equal returns false.

not-lt

Less than returns false.

not-gt

Greater than returns false.

Example

<if-local-variable op="available" name="myLocalVariable"/><if-local-variable op="equal" mode="nocase"name="myLocalVariable">enabled</if-local-variable>

Allowed Content

#PCDATA

Attributes

Attribute

Possible Values

Default Value

disabled

true | false

True if this element is disabled.

false

mode

case | nocase | regex | src-dn | dest-dn | numeric | octet

Comparison mode if op=“equal” or op=“not-equal”.

nocase

name

CDATA

Name of the variable. Supports variable expansion.

#REQUIRED

notrace

true | false

True if this element should not be traced during execution of the policy.

false

op

available | equal | lt | gt | not-available | not-equal | not-lt | not-gt

Test operator.

#REQUIRED

Content Rule

( #PCDATA )

Parent Elements

Element

Description

and

Logical conjunction.

or

Logical disjunction.