adbrucker
/
lh-l4v
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
lh-l4v/spec/take-grant
History
Gerwin Klein 0cf64b5498
READMEs: use run_tests consistently in READMEs (#622) 
Avoid mixing `isabelle`, `make`, and `run_tests` invocations.
Standardise on `run_tests` and mention `L4V_ARCH` each time to
indicate that you can and should set `L4V_ARCH`.

Signed-off-by: Gerwin Klein <gerwin.klein@proofcraft.systems>
 		2023-03-30 13:59:18 +11:00
..
Confine_S.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Example.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Example2.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Islands_S.thy isabelle2021-1: global hide_lams -> opaque_lifting 2022-03-29 08:38:25 +11:00
Isolation_S.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
README.md READMEs: use run_tests consistently in READMEs (#622) 2023-03-30 13:59:18 +11:00
System_S.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00

README.md

An Abstract Take/Grant Security Model

l4v/spec/take-grant/

This directory contains the Isabelle sources of an abstract take-grant security model, studying some of the underlying concepts of seL4's protection mechanisms.

Overview

  • System_S contains the operations and state space of the model.
  • Confine_S shows authority confinement
  • Islands_S explicitly defines the concept of authority-isolated islands and authority confinement on this concept.
  • Isolations_S defines a notion of high-level information flow on take-grant authority and shows that islands stay isolated.
  • Example and Example2 are two example systems in this model.

Building

The corresponding Isabelle session is TakeGrant. To build for the ARM architecture, run in directory l4v/:

L4V_ARCH=ARM ./run_tests TakeGrant

Remarks

  • This specification is not connected with the seL4 code and does not completely describe seL4 behaviour. Instead, it is a more abstract study of the underlying concepts.
  • A previous, simpler version of this model has appeared in Dhammika Elkaduwe's PhD thesis.
  • A description of the extended, more recent model can be found in Andrew Boyton's PhD thesis.