doc/security-framework.md

   1
   2 The security framework
   3 ======================
   4
   5     version: 1
   6     Date:    29 mai 2016
   7     Author:  José Bollo
   8
   9
  10 TABLE-OF-CONTENT-HERE
  11
  12 Setting Smack rules for the application
  13 =======================================
  14
  15 For Tizen, the following rules are set by the security manager for each application.
  16
  17     System ~APP~             rwx
  18     System ~PKG~             rwxat
  19     System ~PKG~::RO         rwxat
  20     ~APP~  System            wx
  21     ~APP~  System::Shared    rxl
  22     ~APP~  System::Run       rwxat
  23     ~APP~  System::Log       rwxa
  24     ~APP~  _                 l
  25     User   ~APP~             rwx
  26     User   ~PKG~             rwxat
  27     User   ~PKG~::RO         rwxat
  28     ~APP~  User              wx
  29     ~APP~  User::Home        rxl
  30     ~APP~  User::App::Shared rwxat
  31     ~APP~  ~PKG~             rwxat
  32     ~APP~  ~PKG~::RO         rxl
  33
  34 Here, ~PKG~ is the identifier of the package and ~APP~ is the identifier of the application.
  35
  36 What user can run an application?
  37 =================================
  38
  39 Not all user are able to run all applications.
  40 How to manage that?
  41
  42
  43
  44
  45 [meta-intel]:       https://github.com/01org/meta-intel-iot-security                "A collection of layers providing security technologies"
  46 [widgets]:          http://www.w3.org/TR/widgets                                    "Packaged Web Apps"
  47 [widgets-digsig]:   http://www.w3.org/TR/widgets-digsig                             "XML Digital Signatures for Widgets"
  48 [libxml2]:          http://xmlsoft.org/html/index.html                              "libxml2"
  49 [openssl]:          https://www.openssl.org                                         "OpenSSL"
  50 [xmlsec]:           https://www.aleksey.com/xmlsec                                  "XMLSec"
  51 [json-c]:           https://github.com/json-c/json-c                                "JSON-c"
  52 [d-bus]:            http://www.freedesktop.org/wiki/Software/dbus                   "D-Bus"
  53 [libzip]:           http://www.nih.at/libzip                                        "libzip"
  54 [cmake]:            https://cmake.org                                               "CMake"
  55 [security-manager]: https://wiki.tizen.org/wiki/Security/Tizen_3.X_Security_Manager "Security-Manager"
  56 [app-manifest]:     http://www.w3.org/TR/appmanifest                                "Web App Manifest"
  57 [tizen-security]:   https://wiki.tizen.org/wiki/Security                            "Tizen security home page"
  58 [tizen-secu-3]:     https://wiki.tizen.org/wiki/Security/Tizen_3.X_Overview         "Tizen 3 security overview"
  59
  60
  61
  62