doc/security-framework.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4   <meta charset="utf-8">
   5   <meta name="generator" content="pandoc">
   6   <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes">
   7   <meta name="author" content="José Bollo">
   8   <title>The security framework</title>
   9   <style type="text/css">code{white-space: pre;}</style>
  10   <!--[if lt IE 9]>
  11     <script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script>
  12   <![endif]-->
  13   <link rel="stylesheet" href="doc.css">
  14 </head>
  15 <body>
  16 <header>
  17 <h1 class="title">The security framework</h1>
  18 <h2 class="author">José Bollo</h2>
  19 <h3 class="date">29 mai 2016</h3>
  20 </header>
  21 <nav id="TOC">
  22 <ul>
  23 <li><a href="#the-security-framework">The security framework</a></li>
  24 <li><a href="#setting-smack-rules-for-the-application">Setting Smack rules for the application</a></li>
  25 <li><a href="#what-user-can-run-an-application">What user can run an application?</a></li>
  26 </ul>
  27 </nav>
  28 <h1 id="the-security-framework">The security framework</h1>
  29 <pre><code>version: 1
  30 Date:    29 mai 2016
  31 Author:  José Bollo</code></pre>
  32 <p>TABLE-OF-CONTENT-HERE</p>
  33 <h1 id="setting-smack-rules-for-the-application">Setting Smack rules for the application</h1>
  34 <p>For Tizen, the following rules are set by the security manager for each application.</p>
  35 <pre><code>System ~APP~             rwx
  36 System ~PKG~             rwxat
  37 System ~PKG~::RO         rwxat
  38 ~APP~  System            wx
  39 ~APP~  System::Shared    rxl
  40 ~APP~  System::Run       rwxat
  41 ~APP~  System::Log       rwxa
  42 ~APP~  _                 l
  43 User   ~APP~             rwx
  44 User   ~PKG~             rwxat
  45 User   ~PKG~::RO         rwxat
  46 ~APP~  User              wx
  47 ~APP~  User::Home        rxl
  48 ~APP~  User::App::Shared rwxat
  49 ~APP~  ~PKG~             rwxat
  50 ~APP~  ~PKG~::RO         rxl</code></pre>
  51 <p>Here, <sub>PKG</sub> is the identifier of the package and <sub>APP</sub> is the identifier of the application.</p>
  52 <h1 id="what-user-can-run-an-application">What user can run an application?</h1>
  53 <p>Not all user are able to run all applications. How to manage that?</p>
  54 </body>
  55 </html>