Expand description
Concept 5’s steps, joined into a session.
Open and validate, decide, extract, mark, launch, watch, write back, close.
Everything security-relevant that this tool does happens on the path through
open, which is what concept 8 means by the engine being one body of code
on three platforms.
The policy check is here and immediately before the launch. Concept 10
says enforcement lives in the launch path: a value read at startup, held
across a policy push, or handed in over IPC is a bypass. So open resolves
policy itself, from sources it is given rather than from an answer somebody
else computed, and nothing between that decision and the launch can change
what runs.
Structs§
- Lingering
- A closed session the target application has not finished with, still watched.
- Opened
- A session that is open, with its content file launched and its directory watched.
Enums§
Functions§
- open
- Open a container: concept 5, steps 1 through 7.