Rainbow: Difference between revisions

From OLPC
Jump to navigation Jump to search
(Fix list)
m (Initial writeup)
Line 1: Line 1:
Rainbow is the implementation of the [[Bitfrost]] security specification. Raibow:
= Protocol =

* /cmd - Root of all system commands
* Negotiates launching activities and creating a secure, minimal environment for their operation inside a 'Container', a way of isolating one activity from another. This includes limiting the scope of Filesystem, Network Access and CPU time that each activity has access to.
* /cmd/exec - Start a new activity using the XMLized handle given as a POST body.
* Creates a means for Updates to happen in a reliable and secure way.
* Provides interfaces to VServer and other libraries that make the above possible

Revision as of 22:50, 28 August 2007

Rainbow is the implementation of the Bitfrost security specification. Raibow:

  • Negotiates launching activities and creating a secure, minimal environment for their operation inside a 'Container', a way of isolating one activity from another. This includes limiting the scope of Filesystem, Network Access and CPU time that each activity has access to.
  • Creates a means for Updates to happen in a reliable and secure way.
  • Provides interfaces to VServer and other libraries that make the above possible