| (* |
| * Licensed to the Apache Software Foundation (ASF) under one |
| * or more contributor license agreements. See the NOTICE file |
| * distributed with this work for additional information |
| * regarding copyright ownership. The ASF licenses this file |
| * to you under the Apache License, Version 2.0 (the |
| * "License"); you may not use this file except in compliance |
| * with the License. You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, |
| * software distributed under the License is distributed on an |
| * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| * KIND, either express or implied. See the License for the |
| * specific language governing permissions and limitations |
| * under the License. |
| *) |
| |
| theory TeaclaveAccessControl |
| imports Main FDP_ACF FIA_USB FDP_ACC |
| begin |
| |
| locale TeaclaveAccessControl=FdpAcf1 nogid valid_gid noiid valid_iid trusted untrusted |
| is_trusted device normal is_normal data func is_data |
| noresrcattr resrc_attr resrcattr_presrcid resrcattr_infoid |
| resrcattr_trustlevel resrcattr_presrctype resrcattr_infotype |
| nouid valid_uid nousrattr usr_attr usrattr_id nousrattrconf |
| usrattr_conf is_usrattrconf find_usrid delete_usrattr |
| get_usrattr valid_usrattrconf nosubjattr subj_attr |
| subjattr_callerattr subjattr_participants |
| subjattr_resrcattr noobjattr obj_attr |
| objattr_owners objattr_resrcattr rel_subset |
| task_access_function user_access_function task_access_data |
| user_access_data+ |
| FiaUsb1 nouid valid_uid nogid valid_gid noiid valid_iid |
| trusted untrusted is_trusted device normal is_normal data |
| func is_data noresrcattr resrc_attr resrcattr_presrcid |
| resrcattr_infoid resrcattr_trustlevel resrcattr_presrctype |
| resrcattr_infotype nousrattr usr_attr usrattr_id |
| nousrattrconf usrattr_conf is_usrattrconf find_usrid |
| delete_usrattr get_usrattr valid_usrattrconf nosubjattr |
| subj_attr subjattr_callerattr |
| subjattr_participants subjattr_resrcattr user_bind_subject+ |
| FdpAcc1 nouid valid_uid nogid valid_gid noiid valid_iid |
| trusted untrusted is_trusted device normal is_normal data |
| func is_data noresrcattr resrc_attr resrcattr_presrcid |
| resrcattr_infoid resrcattr_trustlevel resrcattr_presrctype |
| resrcattr_infotype nousrattr usr_attr usrattr_id |
| nousrattrconf usrattr_conf is_usrattrconf find_usrid |
| delete_usrattr get_usrattr valid_usrattrconf nosubjattr |
| subj_attr subjattr_callerattr |
| subjattr_participants subjattr_resrcattr nosubjattrconf |
| subjattr_conf is_subjattrconf subjattr_subjid find_subjid |
| delete_subjattr get_subjattr subjattrconf_uniq |
| valid_subjattrconf noobjattr obj_attr |
| objattr_owners objattr_resrcattr noobjattrconf objattr_conf |
| is_objattrconf objattr_objid find_objid delete_objattr |
| get_objattr valid_objattrconf rel_disjoint nomodelconf |
| model_conf modelconf_subj modelconf_obj valid_modelconf |
| |
| for nogid::"'gid" |
| and valid_gid::"'gid\<Rightarrow>bool" |
| and noiid::"'iid" |
| and valid_iid::"'iid\<Rightarrow>bool" |
| and trusted::"'trustlevel" |
| and untrusted::"'trustlevel" |
| and is_trusted::"'trustlevel\<Rightarrow>bool" |
| and device::"'presrctype" |
| and normal::"'presrctype" |
| and is_normal::"'presrctype\<Rightarrow>bool" |
| and data::"'infotype" |
| and func::"'infotype" |
| and is_data::"'infotype\<Rightarrow>bool" |
| and noresrcattr::'resrcattr |
| and resrc_attr::"'gid\<Rightarrow>'iid\<Rightarrow>'trustlevel\<Rightarrow>'presrctype\<Rightarrow>'infotype\<Rightarrow>'resrcattr" |
| and resrcattr_presrcid::"'resrcattr\<Rightarrow>'gid" |
| and resrcattr_infoid::"'resrcattr\<Rightarrow>'iid" |
| and resrcattr_trustlevel::"'resrcattr\<Rightarrow>'trustlevel" |
| and resrcattr_presrctype::"'resrcattr\<Rightarrow>'presrctype" |
| and resrcattr_infotype::"'resrcattr\<Rightarrow>'infotype" |
| and nouid::"'uid" |
| and valid_uid::"'uid\<Rightarrow>bool" |
| and nousrattr::'usrattr |
| and usr_attr::"'uid\<Rightarrow>'usrattr" |
| and usrattr_id::"'usrattr\<Rightarrow>'uid" |
| and nousrattrconf::"'usrattrconf" |
| and usrattr_conf::"'usrattrconf\<Rightarrow>'usrattr\<Rightarrow>'usrattrconf" |
| and is_usrattrconf::"'usrattrconf\<Rightarrow>bool" |
| and find_usrid::"'usrattrconf\<Rightarrow>'usrattr\<Rightarrow>bool" |
| and delete_usrattr::"'usrattrconf\<Rightarrow>'usrattr\<Rightarrow>'usrattrconf" |
| and get_usrattr::"'usrattrconf\<Rightarrow>'uid\<Rightarrow>'usrattr" |
| and valid_usrattrconf::"'usrattrconf\<Rightarrow>bool" |
| and nosubjattr::'subjattr |
| and subj_attr::"'usrattr\<Rightarrow>'usrattrconf\<Rightarrow>'resrcattr\<Rightarrow>'subjattr" |
| and subjattr_callerattr::"'subjattr\<Rightarrow>'usrattr" |
| and subjattr_participants::"'subjattr\<Rightarrow>'usrattrconf" |
| and subjattr_resrcattr::"'subjattr\<Rightarrow>'resrcattr" |
| and noobjattr::'objattr |
| and obj_attr::"'usrattrconf\<Rightarrow>'resrcattr\<Rightarrow>'objattr" |
| and objattr_owners::"'objattr\<Rightarrow>'usrattrconf" |
| and objattr_resrcattr::"'objattr\<Rightarrow>'resrcattr" |
| and rel_subset::"'usrattrconf\<Rightarrow>'usrattrconf\<Rightarrow>bool" |
| and task_access_function::"'subjattr\<Rightarrow>'objattr\<Rightarrow>bool" |
| and user_access_function::"'usrattr\<Rightarrow>'objattr\<Rightarrow>bool" |
| and task_access_data::"'subjattr\<Rightarrow>'objattr\<Rightarrow>bool" |
| and user_access_data::"'usrattr\<Rightarrow>'objattr\<Rightarrow>bool" |
| and user_bind_subject::"'usrattr\<Rightarrow>'subjattr\<Rightarrow>'subjattr" |
| and nosubjattrconf::"'subjattrconf" |
| and subjattr_conf::"'subjattrconf\<Rightarrow>'subjattr\<Rightarrow>'subjattrconf" |
| and is_subjattrconf::"'subjattrconf\<Rightarrow>bool" |
| and subjattr_subjid::"'subjattr\<Rightarrow>'gid" |
| and find_subjid::"'subjattrconf\<Rightarrow>'subjattr\<Rightarrow>bool" |
| and delete_subjattr::"'subjattrconf\<Rightarrow>'subjattr\<Rightarrow>'subjattrconf" |
| and get_subjattr::"'subjattrconf\<Rightarrow>'gid\<Rightarrow>'subjattr" |
| and subjattrconf_uniq::"'subjattrconf\<Rightarrow>bool" |
| and valid_subjattrconf::"'subjattrconf\<Rightarrow>bool" |
| and noobjattrconf::"'objattrconf" |
| and objattr_conf::"'objattrconf\<Rightarrow>'objattr\<Rightarrow>'objattrconf" |
| and is_objattrconf::"'objattrconf\<Rightarrow>bool" |
| and objattr_objid::"'objattr\<Rightarrow>'gid" |
| and find_objid::"'objattrconf\<Rightarrow>'objattr\<Rightarrow>bool" |
| and delete_objattr::"'objattrconf\<Rightarrow>'objattr\<Rightarrow>'objattrconf" |
| and get_objattr::"'objattrconf\<Rightarrow>'gid\<Rightarrow>'objattr" |
| and valid_objattrconf::"'objattrconf\<Rightarrow>bool" |
| and rel_disjoint::"'subjattrconf\<Rightarrow>'objattrconf\<Rightarrow>bool" |
| and nomodelconf::'modelconf |
| and model_conf::"'subjattrconf\<Rightarrow>'objattrconf\<Rightarrow>'modelconf" |
| and modelconf_subj::"'modelconf\<Rightarrow>'subjattrconf" |
| and modelconf_obj::"'modelconf\<Rightarrow>'objattrconf" |
| and valid_modelconf::"'modelconf\<Rightarrow>bool" |
| begin |
| |
| definition |
| request_user_access_data::"'modelconf\<Rightarrow>'uid\<Rightarrow>'gid\<Rightarrow>bool" where |
| "request_user_access_data mconf uid oid\<equiv> |
| user_access_data(usr_attr uid) (read_objattr mconf oid)" |
| |
| definition |
| request_user_access_function::"'modelconf\<Rightarrow>'uid\<Rightarrow>'gid\<Rightarrow>bool" where |
| "request_user_access_function mconf uid oid\<equiv> |
| user_access_function(usr_attr uid) (read_objattr mconf oid)" |
| |
| definition |
| request_task_access_data::"'modelconf\<Rightarrow>'gid\<Rightarrow>'gid\<Rightarrow>bool" where |
| "request_task_access_data mconf sid oid\<equiv> |
| task_access_data(read_subjattr mconf sid) (read_objattr mconf oid)" |
| |
| definition |
| request_task_access_function::"'modelconf\<Rightarrow>'gid\<Rightarrow>'gid\<Rightarrow>bool" where |
| "request_task_access_function mconf sid oid\<equiv> |
| task_access_function(read_subjattr mconf sid) (read_objattr mconf oid)" |
| |
| definition |
| request_user_access_task::"'modelconf\<Rightarrow>'uid\<Rightarrow>'gid\<Rightarrow>bool" where |
| "request_user_access_task mconf uid sid\<equiv> |
| find_usrid(subjattr_participants (read_subjattr mconf sid)) (usr_attr uid)" |
| |
| end |
| |
| print_locale! TeaclaveAccessControl |
| |
| end |
