Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add security system #312

Closed
wants to merge 11 commits into from
Closed

Add security system #312

wants to merge 11 commits into from

Commits on Jan 11, 2016

  1. Bump copyright 

    Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
    @zyga
    zyga committed Jan 11, 2016
    Configuration menu
    Copy the full SHA
    6ed9d63 View commit details
    Browse the repository at this point in the history

  2. Add temporary Capability.{Get,Set}Attr() API to decouple from attrtypes 

    This patch adds a small dummy implementation for getting/setting
capability attribute. The real implementation is proposed for merging
separately.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
    @zyga
    zyga committed Jan 11, 2016
    Configuration menu
    Copy the full SHA
    b89199d View commit details
    Browse the repository at this point in the history

  3. Add capability security system interface 

    This patch adds an interface for security systems. Security systems are
an abstraction for configuring security associated with capabilities.
Each type will define security systems that make the permission side
of the capability work. Various security systems can be used (apparmor,
seccomp, dbus, etc.).

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
    @zyga
    zyga committed Jan 11, 2016
    Configuration menu
    Copy the full SHA
    067bd5d View commit details
    Browse the repository at this point in the history

  4. Associate a list of security systems with each capability type 

    Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
    @zyga
    zyga committed Jan 11, 2016
    Configuration menu
    Copy the full SHA
    16c973e View commit details
    Browse the repository at this point in the history

  5. Add a mock security system for testing 

    Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
    @zyga
    zyga committed Jan 11, 2016
    Configuration menu
    Copy the full SHA
    63da285 View commit details
    Browse the repository at this point in the history

  6. Add a legacy security system 

    This patch adds a wrapper to use hw-access as a capability security system.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
    @zyga
    zyga committed Jan 11, 2016
    Configuration menu
    Copy the full SHA
    f544c3b View commit details
    Browse the repository at this point in the history

  7. Add caps.Type.{Grant,Revoke}Permissions() 

    Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
    @zyga
    zyga committed Jan 11, 2016
    Configuration menu
    Copy the full SHA
    8992d4e View commit details
    Browse the repository at this point in the history

  8. Fix golint issues on INITIAL, GRANTED and REVOKED 

    Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
    @zyga
    zyga committed Jan 11, 2016
    Configuration menu
    Copy the full SHA
    ac296da View commit details
    Browse the repository at this point in the history

  9. Fix golint issue on loop iteration 

    Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
    @zyga
    zyga committed Jan 11, 2016
    Configuration menu
    Copy the full SHA
    36e4a0c View commit details
    Browse the repository at this point in the history

  10. Fix typo in "security" 

    Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
    @zyga
    zyga committed Jan 11, 2016
    Configuration menu
    Copy the full SHA
    42bf961 View commit details
    Browse the repository at this point in the history

  11. Reword docstring for Type.GrantPermission to avoid the word hardware 

    Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
    @zyga
    zyga committed Jan 11, 2016
    Configuration menu
    Copy the full SHA
    0b8f54b View commit details
    Browse the repository at this point in the history