Maemo security - Revision history

joerg_rw: Undo revision 45998 by 114.79.28.10 (Talk) vandalism/spam

2011-12-15T06:28:02Z

Undo revision 45998 by 114.79.28.10 (Talk) vandalism/spam

← Older revision		Revision as of 06:28, 15 December 2011
Line 17:		Line 17:
	==Is there a diagram showing the security framework and components?==		==Is there a diagram showing the security framework and components?==

-	See [http://www.slideshare.net/peterschneider/maemo-6-platform-security slide] #2, #5 and #9 of Elena Reshetova's ~~[http://goo.gl/Dg36c youtube] [http://goo.gl/16GT5 idm]~~ [[Maemo Summit 2009/Day 3#Maemo_Platform_Security:_Principles_and_Concepts \| Maemo Summit presentation]]	+	See [http://www.slideshare.net/peterschneider/maemo-6-platform-security slide] #2, #5 and #9 of Elena Reshetova's [[Maemo Summit 2009/Day 3#Maemo_Platform_Security:_Principles_and_Concepts \| Maemo Summit presentation]]

	Elena Reshetova: The presentation was [http://www.slideshare.net/peterschneider/maemo-6-platform-security uploaded], and currently it is the only information, which I can share.		Elena Reshetova: The presentation was [http://www.slideshare.net/peterschneider/maemo-6-platform-security uploaded], and currently it is the only information, which I can share.

114.79.28.10: /* Is there a diagram showing the security framework and components? */

2011-12-15T03:09:17Z

Is there a diagram showing the security framework and components?

← Older revision		Revision as of 03:09, 15 December 2011
Line 17:		Line 17:
	==Is there a diagram showing the security framework and components?==		==Is there a diagram showing the security framework and components?==

-	See [http://www.slideshare.net/peterschneider/maemo-6-platform-security slide] #2, #5 and #9 of Elena Reshetova's [[Maemo Summit 2009/Day 3#Maemo_Platform_Security:_Principles_and_Concepts \| Maemo Summit presentation]]	+	See [http://www.slideshare.net/peterschneider/maemo-6-platform-security slide] #2, #5 and #9 of Elena Reshetova's [http://goo.gl/Dg36c youtube] [http://goo.gl/16GT5 idm] [[Maemo Summit 2009/Day 3#Maemo_Platform_Security:_Principles_and_Concepts \| Maemo Summit presentation]]

	Elena Reshetova: The presentation was [http://www.slideshare.net/peterschneider/maemo-6-platform-security uploaded], and currently it is the only information, which I can share.		Elena Reshetova: The presentation was [http://www.slideshare.net/peterschneider/maemo-6-platform-security uploaded], and currently it is the only information, which I can share.

amigadave: wikify slightly

2011-02-08T13:15:24Z

wikify slightly

dlmiles: Undo revision 34632 by dlmiles (Talk)

2010-05-24T16:19:44Z

Undo revision 34632 by dlmiles (Talk)

← Older revision		Revision as of 16:19, 24 May 2010
Line 66:		Line 66:

	===Is there any GPLv3 software impacted?===		===Is there any GPLv3 software impacted?===
-
-	~~===What is the best email address (or method of contact) to the Nokia Security team that is working on this ?===~~
-
-	~~===Which product does the team believe this shall be released into, Maemo6 or Meego1 (or both, if both will eventually exist) ?===~~
-
-	===The community require to make use of all features of closed mode where there is a common goal (for example the purpose of providing rootkit protection for users using alternative kernels but are not themselves kernel hackers). For this there would need to be the ability to set and store a few additional cryptographic keys provided by the user, the verification code needs to optimally select the correct key to perform verification with (verfiying each key until you get a match maybe too slow at bootup!) and there would need to be at least one additional mode to mean any verifed kernel image. Where "closed mode" (aka "vendor mode") would only boot images that verfiied with a vendors (hidden/closed/secret/immutable to community) key. These would be features of NOLO.===

	[[Category:Harmattan]]		[[Category:Harmattan]]
	[[Category:Development]]		[[Category:Development]]

dlmiles at 06:18, 21 May 2010

2010-05-21T06:18:37Z

← Older revision		Revision as of 06:18, 21 May 2010
Line 66:		Line 66:

	===Is there any GPLv3 software impacted?===		===Is there any GPLv3 software impacted?===
		+
		+	===What is the best email address (or method of contact) to the Nokia Security team that is working on this ?===
		+
		+	===Which product does the team believe this shall be released into, Maemo6 or Meego1 (or both, if both will eventually exist) ?===
		+
		+	===The community require to make use of all features of closed mode where there is a common goal (for example the purpose of providing rootkit protection for users using alternative kernels but are not themselves kernel hackers). For this there would need to be the ability to set and store a few additional cryptographic keys provided by the user, the verification code needs to optimally select the correct key to perform verification with (verfiying each key until you get a match maybe too slow at bootup!) and there would need to be at least one additional mode to mean any verifed kernel image. Where "closed mode" (aka "vendor mode") would only boot images that verfiied with a vendors (hidden/closed/secret/immutable to community) key. These would be features of NOLO.===

	[[Category:Harmattan]]		[[Category:Harmattan]]
	[[Category:Development]]		[[Category:Development]]

lcuk: added link to code repository

2010-05-18T19:47:23Z

added link to code repository

← Older revision		Revision as of 19:47, 18 May 2010
Line 3:		Line 3:
	* [http://www.slideshare.net/peterschneider/maemo-6-platform-security Slides]		* [http://www.slideshare.net/peterschneider/maemo-6-platform-security Slides]
	* Video (TBC)		* Video (TBC)
		+	* [http://meego.gitorious.org/meego-platform-security Source Code]

	The concepts outlined include well established favourites in the OSS world (like privilege management) as well as some that are rather less well regarded - such as relatives of the Trusted Computing Platform and DRM.		The concepts outlined include well established favourites in the OSS world (like privilege management) as well as some that are rather less well regarded - such as relatives of the Trusted Computing Platform and DRM.

89.247.152.111: /* Can network operators restrict you switching to Open mode? */

2010-04-05T15:22:17Z

Can network operators restrict you switching to Open mode?

← Older revision		Revision as of 15:22, 5 April 2010
Line 45:		Line 45:

	Elena Reshetova: If the device is SIM-locked, operator can restrict you to the usage of one particular kernel (slide 5), for example the one, which was shipped with a device. However, it is up to you to decide to buy the device from the operator or from the Nokia store.		Elena Reshetova: If the device is SIM-locked, operator can restrict you to the usage of one particular kernel (slide 5), for example the one, which was shipped with a device. However, it is up to you to decide to buy the device from the operator or from the Nokia store.
		+
		+	Till Harbaum: Imho GPLv3 requires you to provide "installation instructions". gstreamer comes under GPLv3, MeeGo uses gstreamer, hence no distributor is allowed to prevent the installtion of e.g. a modified version of gstreamer. They are even required to tell you how to do that.

	===How granular is the encryption?===		===How granular is the encryption?===

amigadave: Category:Harmattan and Category:Development

2010-02-11T15:30:52Z

Category:Harmattan and Category:Development

← Older revision		Revision as of 15:30, 11 February 2010
Line 63:		Line 63:

	===Is there any GPLv3 software impacted?===		===Is there any GPLv3 software impacted?===
		+
		+	[[Category:Harmattan]]
		+	[[Category:Development]]

86.21.9.35: /* Can network operators restrict you switching to Open mode? */ sp. form/from

2010-02-11T10:59:12Z

Can network operators restrict you switching to Open mode?: sp. form/from

← Older revision		Revision as of 10:59, 11 February 2010
Line 44:		Line 44:
	Like if a device is sim-locked to a particular network, does the device get locked down in closed DRM mode only too? Can you always switch to open mode?		Like if a device is sim-locked to a particular network, does the device get locked down in closed DRM mode only too? Can you always switch to open mode?

-	Elena Reshetova: If the device is SIM-locked, operator can restrict you to the usage of one particular kernel (slide 5), for example the one, which was shipped with a device. However, it is up to you to decide to buy the device from the operator or ~~form~~ the Nokia store.	+	Elena Reshetova: If the device is SIM-locked, operator can restrict you to the usage of one particular kernel (slide 5), for example the one, which was shipped with a device. However, it is up to you to decide to buy the device from the operator or from the Nokia store.

	===How granular is the encryption?===		===How granular is the encryption?===

corsac: Undo revision 20711 by r-r (Talk) (move it to Talk:)

2009-10-21T06:01:42Z

Undo revision 20711 by r-r (Talk) (move it to Talk:)

← Older revision		Revision as of 06:01, 21 October 2009
Line 63:		Line 63:

	===Is there any GPLv3 software impacted?===		===Is there any GPLv3 software impacted?===
-
-
-	~~=== Will a TPM chip be added? ===~~
-
-	~~Could it serve other security purpose then in Open mode?~~
-
-	~~=== How are important upgrades handled? ===~~
-
-	~~Do they require to sign a whole new system image?~~

← Older revision		Revision as of 13:15, 8 February 2011
Line 15:		Line 15:
	Some examples:		Some examples:

-	===Is there a diagram showing the security framework and components?===	+	==Is there a diagram showing the security framework and components?==

	See [http://www.slideshare.net/peterschneider/maemo-6-platform-security slide] #2, #5 and #9 of Elena Reshetova's [[Maemo Summit 2009/Day 3#Maemo_Platform_Security:_Principles_and_Concepts \| Maemo Summit presentation]]		See [http://www.slideshare.net/peterschneider/maemo-6-platform-security slide] #2, #5 and #9 of Elena Reshetova's [[Maemo Summit 2009/Day 3#Maemo_Platform_Security:_Principles_and_Concepts \| Maemo Summit presentation]]
Line 21:		Line 21:
	Elena Reshetova: The presentation was [http://www.slideshare.net/peterschneider/maemo-6-platform-security uploaded], and currently it is the only information, which I can share.		Elena Reshetova: The presentation was [http://www.slideshare.net/peterschneider/maemo-6-platform-security uploaded], and currently it is the only information, which I can share.

-	===What is "Open Mode" and can it be revoked remotely?===	+	==What is "Open Mode" and can it be revoked remotely?==

	"Open" mode is when an unsigned kernel has been booted. Disabling it remotely would, presumably, require a change to the bootloader. See [http://www.slideshare.net/peterschneider/maemo-6-platform-security slide] #??? --[[User:jaffa\|Jaffa]] 11:36, 13 October 2009 (UTC)		"Open" mode is when an unsigned kernel has been booted. Disabling it remotely would, presumably, require a change to the bootloader. See [http://www.slideshare.net/peterschneider/maemo-6-platform-security slide] #??? --[[User:jaffa\|Jaffa]] 11:36, 13 October 2009 (UTC)

-	===What does closed mode restrict you from doing?===	+	==What does closed mode restrict you from doing?==

	* Terminal?		* Terminal?
Line 32:		Line 32:
	Elena Reshetova: In general "close" mode has its own security policy, which user won't be able to change.		Elena Reshetova: In general "close" mode has its own security policy, which user won't be able to change.

-	* Cellular is marked as a protected ressource in the slide. Can one still use it (phone, data, sms etc.) while running in open mode? While ~~runnin~~ a rebuilt kernel?	+	* Cellular is marked as a protected ressource in the slide. Can one still use it (phone, data, sms etc.) while running in open mode? While running a rebuilt kernel?

-	Elena Reshetova: If you use your own kernel, you are the one to set the security policy for the device, meaning that your SW in this case can make calls, send ~~sms~~ and so on (for example). Please note that the list of protected resources on the slide is given just as example (to show the possible granularity level), so it doesn't mean that we would have exactly these resources.	+	Elena Reshetova: If you use your own kernel, you are the one to set the security policy for the device, meaning that your SW in this case can make calls, send SMS and so on (for example). Please note that the list of protected resources on the slide is given just as example (to show the possible granularity level), so it doesn't mean that we would have exactly these resources.

-	===How easy is it to switch between Open and Closed modes?===	+	==How easy is it to switch between Open and Closed modes?==

	Is it so trivial that you would want to and be able to do it several times a day and on the go (without restart)?		Is it so trivial that you would want to and be able to do it several times a day and on the go (without restart)?
Line 42:		Line 42:
	Elena Reshetova: I should be able to tell the exact procedure in the future, but for now I can say that it won't be so trivial (like press the GUI button :-)), and the restart is needed. The checks for the SW image are done by the Loader, and during the boot time, so you do need to restart.		Elena Reshetova: I should be able to tell the exact procedure in the future, but for now I can say that it won't be so trivial (like press the GUI button :-)), and the restart is needed. The checks for the SW image are done by the Loader, and during the boot time, so you do need to restart.

-	===Can network operators restrict you switching to Open mode?===	+	==Can network operators restrict you switching to Open mode?==
-	Like if a device is ~~sim~~-locked to a particular network, does the device get locked down in closed DRM mode only too? Can you always switch to open mode?	+
		+	Like if a device is SIM-locked to a particular network, does the device get locked down in closed DRM mode only too? Can you always switch to open mode?

	Elena Reshetova: If the device is SIM-locked, operator can restrict you to the usage of one particular kernel (slide 5), for example the one, which was shipped with a device. However, it is up to you to decide to buy the device from the operator or from the Nokia store.		Elena Reshetova: If the device is SIM-locked, operator can restrict you to the usage of one particular kernel (slide 5), for example the one, which was shipped with a device. However, it is up to you to decide to buy the device from the operator or from the Nokia store.

-	Till Harbaum: Imho GPLv3 requires you to provide "installation instructions". gstreamer comes under GPLv3, MeeGo uses gstreamer, hence no distributor is allowed to prevent the ~~installtion~~ of e.g. a modified version of gstreamer. They are even required to tell you how to do that.	+	Till Harbaum: Imho GPLv3 requires you to provide "installation instructions". gstreamer comes under GPLv3, MeeGo uses gstreamer, hence no distributor is allowed to prevent the installation of e.g. a modified version of gstreamer. They are even required to tell you how to do that.
		+
		+	==How granular is the encryption?==

-	~~===How granular is the encryption?===~~
	If my app creates content in the closed mode can I see it in open mode?		If my app creates content in the closed mode can I see it in open mode?

	Elena Reshetova: If your application uses the Protected Storage for encryption (slide 8) in the initial mode, and after you switch to another mode, the application won't be able to get decrypted data. If your application just stores the data in the filesystem, after switching to your own kernel, you will be able to access the data (because they are just plain files in the filesystem).		Elena Reshetova: If your application uses the Protected Storage for encryption (slide 8) in the initial mode, and after you switch to another mode, the application won't be able to get decrypted data. If your application just stores the data in the filesystem, after switching to your own kernel, you will be able to access the data (because they are just plain files in the filesystem).

-	===Can open applications use the privilege mechanisms in the Open and Closed modes?===	+	==Can open applications use the privilege mechanisms in the Open and Closed modes?==

	Elena Reshetova: I guess the question is "Can the applications access protected resources in both modes?" I hope I got the question correctly. The answer is that the Device Security Policy (slide 7) defines the resources can be potentially granted to the SW coming from a particular SW source. When one uses the Nokia signed kernel, the device security policy is defined, and user can't change it. If one uses its own kernel (or community kernel for example), he (or community) is the one to define/change the device policy. This means that one can, for example, change the policy in the way that the SW coming from the maemo.org gets access to all protected resources (of course some content becomes unavailable when one switch to its own kernel, for example DRM). However, again, it is possible only while using your own kernel.		Elena Reshetova: I guess the question is "Can the applications access protected resources in both modes?" I hope I got the question correctly. The answer is that the Device Security Policy (slide 7) defines the resources can be potentially granted to the SW coming from a particular SW source. When one uses the Nokia signed kernel, the device security policy is defined, and user can't change it. If one uses its own kernel (or community kernel for example), he (or community) is the one to define/change the device policy. This means that one can, for example, change the policy in the way that the SW coming from the maemo.org gets access to all protected resources (of course some content becomes unavailable when one switch to its own kernel, for example DRM). However, again, it is possible only while using your own kernel.

-	===Can open applications use the DRM encryption mechanisms in the Open and Closed modes?===	+	==Can open applications use the DRM encryption mechanisms in the Open and Closed modes?==

-	===Will community extensions to the kernel (modules) be permitted in Open/Closed modes?===	+	==Will community extensions to the kernel (modules) be permitted in Open/Closed modes?==
	I can't see how - which leads to the question: How do community 'enhancements' to the kernel get adopted?		I can't see how - which leads to the question: How do community 'enhancements' to the kernel get adopted?

	Elena Reshetova: In the "Open" mode any changes of the kernel are allowed. Regarding the "closed" mode, unfortunately I am not the right person to answer this question.		Elena Reshetova: In the "Open" mode any changes of the kernel are allowed. Regarding the "closed" mode, unfortunately I am not the right person to answer this question.

-	===Is there any GPLv3 software impacted?===	+	==Is there any GPLv3 software impacted?==

	[[Category:Harmattan]]		[[Category:Harmattan]]
	[[Category:Development]]		[[Category:Development]]