Rainbow: Difference between revisions

Latest revision as of 21:00, 26 November 2011

english | español HowTo [ID# 263143] +/-

Rainbow :: git :: sources :: rainbow-0.8.6.tar.bz2 :: announcement

The Bitfrost security specification argues that existing desktop security conventions do not meet the security needs:

of adventurous kids in 1-1 computing programs,
of the technical staff who help maintain such initiatives, and
of the political constituencies which determine where such programs take place.

The most serious inadequacy of such systems is that they force end-users to take unnecessary security risks (for example, giving all programs a user runs access to the network, to auto-start facilities, and to other programs' data files) while simultaneously denying users the opportunity to do things which can be done safely but which were not anticipated by the system administrator (notably, installing new software or modifying the local system.)

Consequently, we wrote Rainbow.

Rainbow is an isolation shell. This means two things:

shell: Rainbow runs programs on behalf of humans and programs. Rainbow provides those programs with a suitable environment: places in which temporary and persistent data can be stored, environment variables to identify those places, etc.
isolation: People and programs should use Rainbow when they want to isolate programs from other programs and important system resources. "Isolation" is already a familiar concept to most UNIX programmers: many system daemons already operate using their own unique UID and/or GID, and most have private places in which they store their configuration. Rainbow generalizes and extends this paradigm by providing every program it runs with a unique identity, with private storage, with pre-configured resource usage limits, etc.

At the moment, Rainbow only knows how to provide the same primitive form of filesystem and signal isolation that competent sysadmins provide to users of multi-user Unix shell servers.

However, contributions are welcome, particularly contributions which advance existing plans.

Information about rainbow-0.8.*

current situation: feature, design, and implementation notes for rainbow-0.8.*
installation instructions for rainbow-0.8.*
testing instructions for rainbow-0.8.*
next steps!
demo ideas

Other Information

notes for Activity Developers, for Sugar 0.82 and rainbow-0.7.*
historical design comparisons, for rainbow-0.6.*, -0.7.*, and -0.8.*
curiosities

Subpages

(Titles in italics redirect to another page.)

@@ Line 1: / Line 1: @@
 {{translations}}
+<noinclude>{{Google Translations}}
+[[Category:Security]]
+</noinclude>{{Rainbow page}}
+The [[OLPC Bitfrost|Bitfrost]] security specification argues that existing desktop security conventions do not meet the security needs:
-Rainbow implements the isolation shell implicitly described in the [[Bitfrost]] security specification. It is also the name of the [[Build system#Build Branches|build branch]] into which this isolation shell is being integrated.
+* of adventurous kids in 1-1 computing programs,
+* of the technical staff who help maintain such initiatives, and
+* of the political constituencies which determine where such programs take place.
+The most serious inadequacy of such systems is that they force end-users to take unnecessary security risks (for example, giving all programs a user runs access to the network, to auto-start facilities, and to other programs' data files) while simultaneously denying users the opportunity to do things which can be done safely but which were not anticipated by the system administrator (notably, installing new software or modifying the local system.)
+Consequently, [[Security credits#Activity Isolation|we]] wrote [http://dev.laptop.org/git/users/mstone/security/tree/rainbow Rainbow].
-Rainbow:
+Rainbow is an isolation shell. This means two things:
-* Negotiates launching activities and creating a secure, minimal environment for their operation inside a 'Container', a way of isolating one activity from another. This includes limiting the scope of Filesystem, Network Access, and CPU time that each activity has access to.
-* Creates a means for Updates to happen in a reliable and secure way.
-* Provides interfaces to VServer and other libraries that make the above possible.
+# ''shell'': Rainbow runs programs on behalf of humans and programs.  Rainbow provides those programs with a suitable environment:  places in which temporary and persistent data can be stored, environment variables to identify those places, etc.
-== Installing ==
+# ''isolation'': People and programs should use Rainbow when they want to isolate programs from other programs and important system resources.  "Isolation" is already a familiar concept to most UNIX programmers:  many system daemons already operate using their own unique UID and/or GID, and most have private places in which they store their configuration.  Rainbow generalizes and extends this paradigm by providing every program it runs with a unique identity, with private storage, with pre-configured resource usage limits, etc.
+At the moment, Rainbow only knows how to provide the same primitive form of filesystem and signal isolation that competent sysadmins provide to users of multi-user Unix shell servers.
-To install Rainbow, either directly install a build from the [http://xs-dev.laptop.org/~cscott/olpc/streams/rainbow/ Rainbow build branch] or use the [[SoftwareBinaryDifferentialUpdate|network updater]] to migrate to a build from that branch.
+However, '''[[Security#Contributions|contributions]]''' are welcome, particularly contributions which advance [[Rainbow/Next Steps|existing plans]].
-  # olpc-update rainbow-NNN
+'''Information about rainbow-0.8.*'''
+* [[Rainbow/Current Situation|current situation]]: feature, design, and implementation notes for rainbow-0.8.*
-== Resources ==
+* [[Rainbow/Installation Instructions|installation instructions]] for rainbow-0.8.*
+* [[Rainbow/Testing|testing]] instructions for rainbow-0.8.*
+* [[Rainbow/Next Steps|next steps!]]
+* [[Rainbow/Demo Ideas|demo ideas]]
+'''Other Information'''
-* [http://dev.laptop.org/git?p=security;a=summary Code Repository]
-* [[OLPC Bitfrost]] &mdash; [http://dev.laptop.org/git?p=security;a=blob;f=bitfrost.txt;h=96f4997602d817abf7be90a00bf68b3a79a73005;hb=HEAD Bitfrost Spec]
-* [http://dev.laptop.org/git?p=security;a=blob;f=rainbow/README;h=5e7f1051b43292a7af8bb0c6ae72987ad5d89b18;hb=HEAD README] - A description of the scope and design of Rainbow.
-* [http://dev.laptop.org/git?p=security;a=blob;f=rainbow/NOTES;h=5277468b760c7d92d6713f5c0b6939ebf0978f2b;hb=HEAD Notes] - Useful notes on design and hurdles in developing Rainbow.
+* notes for [[Rainbow/Information for Activity Developers|Activity Developers]], for Sugar 0.82 and rainbow-0.7.*
-== README ==
+* [[Rainbow/Historical Designs|historical design comparisons]], for rainbow-0.6.*, -0.7.*, and -0.8.*
+* [[Rainbow/Curiosities|curiosities]]
-<gitembed>security||rainbow/README||660||600</gitembed>
+==Subpages==
+(Titles in ''italics'' redirect to another page.){{Special:PrefixIndex/{{PAGENAME}}/}}
-[[category:software]]
-[[Category:Security]]

Rainbow: Difference between revisions

Latest revision as of 21:00, 26 November 2011

Subpages

Navigation menu

Search