compiler/io.github.aplcornell.viaduct.security

Package-level declarations

Types

BoundedTrustLattice

interface BoundedTrustLattice<T : TrustLattice<T>>

Provides the weakest and strongest principals in a TrustLattice.

sealed class Component<A>

ConfidentialityComponent

data class ConfidentialityComponent<A>(val principal: A) : Component<A>

data class HostPrincipal(val host: Host) : Principal

IntegrityComponent

data class IntegrityComponent<A>(val principal: A) : Component<A>

typealias Label = SecurityLattice<FreeDistributiveLattice<Component<Principal>>>

data class LabelAnd(val lhs: LabelExpression, val rhs: LabelExpression) : LabelExpression

object LabelBottom : LabelExpression

typealias LabelComponent = FreeDistributiveLattice<Component<Principal>>

LabelConfidentiality

data class LabelConfidentiality(val value: LabelExpression) : LabelExpression

LabelExpression

sealed class LabelExpression : PrettyPrintable

data class LabelIntegrity(val value: LabelExpression) : LabelExpression

data class LabelJoin(val lhs: LabelExpression, val rhs: LabelExpression) : LabelExpression

data class LabelLiteral(val name: Host) : LabelExpression

data class LabelMeet(val lhs: LabelExpression, val rhs: LabelExpression) : LabelExpression

data class LabelOr(val lhs: LabelExpression, val rhs: LabelExpression) : LabelExpression

data class LabelParameter(val name: LabelVariable) : LabelExpression

object LabelTop : LabelExpression

PolymorphicPrincipal

data class PolymorphicPrincipal(val labelVariable: LabelVariable) : Principal

sealed class Principal : PrettyPrintable

An actor with an associated security label.

SecurityLattice

class SecurityLattice<T : Lattice<T>>(val confidentialityComponent: T, val integrityComponent: T) : Lattice<SecurityLattice<T>> , TrustLattice<SecurityLattice<T>> , PrettyPrintable

A lattice for information flow security. This is a product lattice with confidentiality and integrity components. Information flows from less restrictive contexts to more restrictive ones.

interface TrustLattice<T : TrustLattice<T>>

A lattice whose elements are interpreted as principals.

Functions

fun actsFor(from: Label, to: Label, congruence: FreeDistributiveLatticeCongruence<PrincipalComponent>): Boolean

confidentiality

fun Label.confidentiality(): Label

fun flowsTo(from: Label, to: Label, congruence: FreeDistributiveLatticeCongruence<PrincipalComponent>): Boolean

fun Label.integrity(): Label

fun interpret(label: Label, trustConfiguration: HostTrustConfiguration): LabelExpression

Properties

val Host.label: SecurityLattice<FreeDistributiveLattice<Component<Principal>>>

val LabelVariable.label: SecurityLattice<FreeDistributiveLattice<Component<Principal>>>