adbrucker
/
lh-l4v
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
lh-l4v/proof/access-control
History
Joel Beeren d6f7579be7 poll: Added new syscall for polling async endpoints (non-blocking wait) 2015-10-21 14:24:49 +11:00
..
ADT_AC.thy 2015 update for access 2015-05-06 13:46:20 -04:00
Access.thy Merge branch 'master' into aep-merge 2015-09-10 17:06:45 +10:00
Arch_AC.thy Merge branch 'master' into aep-merge 2015-09-10 17:06:45 +10:00
CNode_AC.thy Merge branch 'master' into aep-merge 2015-09-10 17:06:45 +10:00
Deterministic_AC.thy Fix Access, InfoFlow and DRefine. 2014-08-13 16:45:40 +10:00
DomainSepInv.thy poll: Added new syscall for polling async endpoints (non-blocking wait) 2015-10-21 14:24:49 +11:00
Dpolicy.thy Merge branch 'master' into aep-merge 2015-09-10 17:06:45 +10:00
ExampleSystem.thy Merge branch 'master' into aep-merge 2015-09-10 17:06:45 +10:00
Finalise_AC.thy Merge branch 'master' into aep-merge 2015-09-10 17:06:45 +10:00
Interrupt_AC.thy ioapic: finished up to InfoFlowC 2014-08-28 15:56:26 +10:00
Ipc_AC.thy poll: Added new syscall for polling async endpoints (non-blocking wait) 2015-10-21 14:24:49 +11:00
README.md misc: Proofing and formatting of README.md files. 2014-07-28 13:15:48 +10:00
Retype_AC.thy Merge branch 'master' into aep-merge 2015-09-10 17:06:45 +10:00
Syscall_AC.thy poll: Added new syscall for polling async endpoints (non-blocking wait) 2015-10-21 14:24:49 +11:00
Tcb_AC.thy poll: Added new syscall for polling async endpoints (non-blocking wait) 2015-10-21 14:24:49 +11:00

README.md

Access Control Proof

This proof establishes that seL4 enforces the security properties of authority confinement and integrity. These are essential correctness properties of its capability-based access control system: authority confinement means that authority propagates only in accordance with capabilities, and integrity means that data cannot be modified without possession of an appropriate write capability to the data. These properties and proofs are described in detail in an ITP 2011 paper. These properties are phrased over seL4's abstract specification and this proof builds on top of the Abstract Spec Invariant Proof.

Building

To build from the l4v/ directory, run:

./isabelle/bin/isabelle build -d . -v -b Access

Important Theories

The top-level theory where these two properties are proved for the kernel is Syscall_AC; the bottom-level theory where the properties are defined is Access.