LIO.DCLabel.Privs.TCB

This module implements the trusted compoenet of DCLabel privileges, documented in LIO.DCLabel.Privs. Since privilege objects may be used unsafely, this module is marked -XUnsafe. Untrusted code may access privileges using the interface provided by LIO.DCLabel.Privs.

Documentation

type DCPrivDesc = Component

A privilege description is simply a conjunction of disjunctions. Unlike (actually minted) privileges (see DCPriv), privilege descriptions may be created by untrusted code.

newtype DCPriv

A privilege is a minted and protected privilege description (DCPrivDesc) that may only be created by trusted code or delegated from an existing DCPriv.

Constructors

DCPrivTCB

Fields

unDCPriv :: DCPrivDesc

Instances

Eq DCPriv

Show DCPriv

Typeable DCPriv

Monoid DCPriv

Privileges can be combined using mappend

PrivTCB DCPriv

MintTCB DCPriv DCPrivDesc

PrivDesc DCPriv DCPrivDesc

Priv DCLabel DCPriv

allPrivTCB :: DCPriv

The all privilege corresponds to logical False