Rainbow: Difference between revisions

From OLPC
Jump to navigation Jump to search
mNo edit summary
Line 18: Line 18:
== Resources ==
== Resources ==


* [[Taste the Rainbow]]: A guided tour of the source code of the rainbow-0.7.0 release.
* [http://dev.laptop.org/git?p=security;a=summary Code Repository]
* [[OLPC Bitfrost]] — [http://dev.laptop.org/git?p=security;a=blob;f=bitfrost.txt;h=96f4997602d817abf7be90a00bf68b3a79a73005;hb=HEAD Bitfrost Spec]
* [[OLPC Bitfrost]]: [http://dev.laptop.org/git?p=security;a=blob;f=bitfrost.txt;h=96f4997602d817abf7be90a00bf68b3a79a73005;hb=HEAD Bitfrost Spec]
* [http://dev.laptop.org/git?p=security;a=blob;f=rainbow/README;h=5e7f1051b43292a7af8bb0c6ae72987ad5d89b18;hb=HEAD README] - A description of the scope and design of Rainbow.
* [http://dev.laptop.org/git?p=security;a=blob;f=rainbow/README;h=5e7f1051b43292a7af8bb0c6ae72987ad5d89b18;hb=HEAD README] - A description of the scope and design of Rainbow.
* [http://dev.laptop.org/git?p=security;a=blob;f=rainbow/NOTES;h=5277468b760c7d92d6713f5c0b6939ebf0978f2b;hb=HEAD Notes] - Useful notes on design and hurdles in developing Rainbow.
* [http://dev.laptop.org/git?p=security;a=blob;f=rainbow/NOTES;h=5277468b760c7d92d6713f5c0b6939ebf0978f2b;hb=HEAD Notes] - Useful notes on design and hurdles in developing Rainbow.

Revision as of 18:40, 3 November 2007

  english | español HowTo [ID# 75294]  +/-  


Rainbow implements the isolation shell implicitly described in the Bitfrost security specification. It is also the name of the build branch into which this isolation shell is being integrated.

Rainbow:

  • Negotiates launching activities and creating a secure, minimal environment for their operation inside a 'Container', a way of isolating one activity from another. This includes limiting the scope of Filesystem, Network Access, and CPU time that each activity has access to.
  • Creates a means for Updates to happen in a reliable and secure way.
  • Provides interfaces to VServer and other libraries that make the above possible.

Installing

To install Rainbow, either directly install a build from the Rainbow build branch or use the network updater to migrate to a build from that branch.

 # olpc-update rainbow-NNN


Resources

README

<gitembed>security||rainbow/README||660||600</gitembed>