Struct kernel::process_checker::basic::AppCheckerSha256

pub struct AppCheckerSha256 { /* private fields */ }

A Credentials Checking Policy that only runs Userspace Binaries which have a unique SHA256 credential. A Userspace Binary without a SHA256 credential fails checking, and only one Userspace Binary with a particular SHA256 hash runs at any time.

Implementations

impl AppCheckerSha256

pub fn new( hash: &'static dyn Sha256Verifier<'static>, buffer: &'static mut [u8; 32] ) -> AppCheckerSha256

Trait Implementations

impl AppCredentialsChecker<'static> for AppCheckerSha256

fn require_credentials(&self) -> bool

fn check_credentials( &self, credentials: TbfFooterV2Credentials, binary: &'static [u8] ) -> Result<(), (ErrorCode, TbfFooterV2Credentials, &'static [u8])>

fn set_client(&self, client: &'static dyn Client<'static>)

impl AppUniqueness for AppCheckerSha256

fn different_identifier( &self, process_a: &dyn Process, process_b: &dyn Process ) -> bool

Returns whether process_a and process_b have a different identifier, and so can run concurrently. If this returns false, the kernel will not run process_a and process_b at the same time.

impl ClientData<32> for AppCheckerSha256

fn add_mut_data_done( &self, _result: Result<(), ErrorCode>, _data: SubSliceMut<'static, u8> )

Called when the data has been added to the digest. data is the SubSliceMut passed in the call to add_mut_data, whose active slice contains the data that was not added. On Ok, data has an active slice of size zero (all data was added). Valid ErrorCode values are:

fn add_data_done( &self, result: Result<(), ErrorCode>, data: SubSlice<'static, u8> )

Called when the data has been added to the digest. data is the SubSlice passed in the call to add_data, whose active slice contains the data that was not added. On Ok, data has an active slice of size zero (all data was added). Valid ErrorCode values are:

impl ClientHash<32> for AppCheckerSha256

fn hash_done( &self, _result: Result<(), ErrorCode>, _digest: &'static mut [u8; 32] )

Called when a digest is computed. digest is the same reference passed to run() to store the hash value. If result is Ok, digest stores the computed hash. If result is Err, the data stored in digest is undefined and may have any value. Valid ErrorCode values are:

impl ClientVerify<32> for AppCheckerSha256

fn verification_done( &self, result: Result<bool, ErrorCode>, compare: &'static mut [u8; 32] )

Called when a verification is computed. compare is the reference supplied to verify() and the data stored in compare is unchanged. On Ok the bool indicates if the computed hash matches the value in compare. Valid ErrorCode values are:

impl Compress for AppCheckerSha256

fn to_short_id(&self, credentials: &TbfFooterV2Credentials) -> ShortID