How a rule for a policy type is processed

The processing of a rule for a policy type is a follows:

1. The using_policy clause finds the applicable policy, that is, the instance of the user-defined policy class (derived from IM_POLICY).
   These class definitions describe the slots available in a policy class:

   MC_DATA_CLASS :
      POLICY ISA CORE_DATA
      DEFINES {
         name              : STRING, key = yes, read_only = yes;
         description       : STRING;
         enabled           : INTEGER, default = 1;
      }; END
   MC_DATA_CLASS:
      IM_POLICY ISA POLICY
      DEFINES {
         active_timeframes : LIST_OF STRING;
         except_timeframes : LIST_OF STRING;
    selector_name     : STRING;
         selector_class    : STRING;
         selector_ecf      : ECF EVENT;
         ordinal           : INTEGER, default=0;
      }; END

2. The tf_active calls evaluates timeframes for the policy.
3. The selector ECF selects the event to process.
4. The actions implement the policy and the opadd call adds an entry to the operations log of the event.