{
 "product": "CAIN OpenShell",
 "slug": "openshell",
 "base": "https://cainstudio.online",
 "page": "https://cainstudio.online/guide-openshell.html",
 "claims": [
  {
   "id": "C01",
   "kind": "control",
   "claim": "Open a work file in /tmp -> Inside the policy.",
   "requests": [
    {
     "method": "POST",
     "url": "/frontier-demo/openshell/run",
     "body": {
      "preset": "read_work_file"
     }
    }
   ],
   "path": "reply.verdict",
   "expect": [
    "ALLOW"
   ]
  },
  {
   "id": "C02",
   "kind": "attack",
   "claim": "Open /etc/shadow (system passwords) -> A protected system file.",
   "requests": [
    {
     "method": "POST",
     "url": "/frontier-demo/openshell/run",
     "body": {
      "preset": "read_etc_shadow"
     }
    }
   ],
   "path": "reply.verdict",
   "expect": [
    "DENIED"
   ]
  },
  {
   "id": "C03",
   "kind": "attack",
   "claim": "Open /root/.ssh/id_rsa (a private key) -> Private keys are off limits.",
   "requests": [
    {
     "method": "POST",
     "url": "/frontier-demo/openshell/run",
     "body": {
      "preset": "read_ssh_key"
     }
    }
   ],
   "path": "reply.verdict",
   "expect": [
    "DENIED"
   ]
  }
 ]
}