permit policy
<!-- has target for http://www.omtp.org/GigGuide -->
<policy-set combine="first-matching-target">
<policy combine="first-applicable" description="catch">
<rule effect="permit">
<condition>
<resource-match attr="device-cap" match="webvm.bind"/>
</condition>
</rule>
<rule effect="permit"></rule>
</policy>
</policy-set>
deny policy
<!-- has target for http://www.omtp.org/GigGuide -->
<policy-set combine="first-matching-target">
<policy combine="first-applicable" description="catch">
<rule effect="permit">
<condition>
<resource-match attr="device-cap" match="webvm.bind"/>
</condition>
</rule>
<rule effect="deny"></rule>
</policy>
</policy-set>
prompt policy
<!-- has target for http://www.omtp.org/GigGuide -->
<policy-set combine="first-matching-target">
<policy combine="first-applicable" description="catch">
<rule effect="permit">
<condition>
<resource-match attr="device-cap" match="webvm.bind"/>
</condition>
</rule>
<rule effect="prompt-blanket"></rule>
</policy>
</policy-set>