doc/security-framework.md

   1
   2 The security framework
   3 ======================
   4
   5     version: 1
   6     Date:    15 March 2016
   7     Author:  José Bollo
   8
   9
  10 Setting Smack rules for the application
  11 =======================================
  12
  13 For Tizen, the following rules are set by the security manager for each application.
  14
  15     System ~APP~             rwx
  16     System ~PKG~             rwxat
  17     System ~PKG~::RO         rwxat
  18     ~APP~  System            wx
  19     ~APP~  System::Shared    rxl
  20     ~APP~  System::Run       rwxat
  21     ~APP~  System::Log       rwxa
  22     ~APP~  _                 l
  23     User   ~APP~             rwx
  24     User   ~PKG~             rwxat
  25     User   ~PKG~::RO         rwxat
  26     ~APP~  User              wx
  27     ~APP~  User::Home        rxl
  28     ~APP~  User::App::Shared rwxat
  29     ~APP~  ~PKG~             rwxat
  30     ~APP~  ~PKG~::RO         rxl
  31
  32 Here, ~PKG~ is the identifier of the package and ~APP~ is the identifier of the application.
  33
  34 What user can run an application?
  35 =================================
  36
  37 Not all user are able to run all applications.
  38 How to manage that?
  39
  40
  41
  42
  43 [meta-intel]:       https://github.com/01org/meta-intel-iot-security                "A collection of layers providing security technologies"
  44 [widgets]:          http://www.w3.org/TR/widgets                                    "Packaged Web Apps"
  45 [widgets-digsig]:   http://www.w3.org/TR/widgets-digsig                             "XML Digital Signatures for Widgets"
  46 [libxml2]:          http://xmlsoft.org/html/index.html                              "libxml2"
  47 [openssl]:          https://www.openssl.org                                         "OpenSSL"
  48 [xmlsec]:           https://www.aleksey.com/xmlsec                                  "XMLSec"
  49 [json-c]:           https://github.com/json-c/json-c                                "JSON-c"
  50 [d-bus]:            http://www.freedesktop.org/wiki/Software/dbus                   "D-Bus"
  51 [libzip]:           http://www.nih.at/libzip                                        "libzip"
  52 [cmake]:            https://cmake.org                                               "CMake"
  53 [security-manager]: https://wiki.tizen.org/wiki/Security/Tizen_3.X_Security_Manager "Security-Manager"
  54 [app-manifest]:     http://www.w3.org/TR/appmanifest                                "Web App Manifest"
  55 [tizen-security]:   https://wiki.tizen.org/wiki/Security                            "Tizen security home page"
  56 [tizen-secu-3]:     https://wiki.tizen.org/wiki/Security/Tizen_3.X_Overview         "Tizen 3 security overview"
  57
  58
  59
  60