faceted (empty) → 0.0.1.0

raw patch · 8 files changed

+434/−0 lines, 8 filesdep +basedep +freesetup-changed

Dependencies added: base, free

Files

• Faceted.hs +10/−0
• Faceted/FHandle.hs +32/−0
• Faceted/FIORef.hs +34/−0
• Faceted/Internal.hs +95/−0
• Faceted/Pure.hs +29/−0
• LICENSE +202/−0
• Setup.hs +2/−0
• faceted.cabal +30/−0

@@ -0,0 +1,10 @@+module Faceted (+  module Faceted.Pure,+  module Faceted.FIORef,+  module Faceted.FHandle+  ) where++import Faceted.Pure+import Faceted.FIORef+import Faceted.FHandle+

@@ -0,0 +1,32 @@+{-# LANGUAGE GADTs,RankNTypes,DeriveFunctor #-}++module Faceted.FHandle (+  View,+  FHandle,+  openFileF,+  hPutCharF,+  hGetCharF,+  ) where++import Faceted.Internal++import System.IO++-- | Facet-aware file handles+data FHandle = FHandle View Handle+ +openFileF :: View -> FilePath -> IOMode -> FIO FHandle+openFileF view path mode = FIO $ \pc ->+  do handle <- openFile path mode+     return (FHandle view handle)++hGetCharF :: FHandle -> FIO (Faceted Char)+hGetCharF (FHandle view handle) = FIO hGetCharForPC+  where hGetCharForPC pc =+          do ch <- hGetChar handle+             return (pcF (map Private view) (Raw ch) (Raw undefined))++hPutCharF :: FHandle -> Faceted Char -> FIO ()+hPutCharF (FHandle view handle) ch = FIO hPutCharForPC+  where hPutCharForPC pc | pc `visibleTo` view = hPutChar handle (project view ch)+                         | otherwise = return ()

@@ -0,0 +1,34 @@+{-# LANGUAGE GADTs,RankNTypes,DeriveFunctor #-}++module Faceted.FIORef (+  FIORef,+  newFIORef,+  readFIORef,+  writeFIORef,+  ) where++import Faceted.Internal++import Data.IORef++-- | Variables of type 'FIORef a' are faceted 'IORef's+data FIORef a = FIORef (IORef (Faceted a))++-- | Allocate a new 'FIORef'+newFIORef :: Faceted a -> FIO (FIORef a)+newFIORef init = FIO newFIORefForPC+  where newFIORefForPC pc = do var <- newIORef (pcF pc init undefined)+                               return (FIORef var)++-- | Read an 'FIORef'+readFIORef :: FIORef a -> FIO (Faceted a)+readFIORef (FIORef var) = FIO readFIORefForPC+  where readFIORefForPC pc = do faceted <- readIORef var+                                return faceted ++-- | Write an 'FIORef'+writeFIORef :: FIORef a -> Faceted a -> FIO ()+writeFIORef (FIORef var) newValue = FIO writeFIORefForPC+  where writeFIORefForPC pc = do oldValue <- readIORef var+                                 writeIORef var (pcF pc newValue oldValue)+

@@ -0,0 +1,95 @@+{-# LANGUAGE GADTs,RankNTypes,DeriveFunctor,DeriveDataTypeable #-}++module Faceted.Internal(+  Label,+  Faceted(Raw,Faceted),+  PC,+  Branch(Private,Public),+  View,+  FIO(FIO),+  pcF,+  project,+  visibleTo+  ) where++import Control.Applicative+import Control.Monad+import Data.IORef+import Data.List+import System.IO+import Data.Dynamic++-- | A security label is any string.+-- Labels need not be secrets; they+-- may be readable strings. Information flow security is ensured by a+-- combination of the type system and dynamic checks.+type Label = String++-- | A _view_ is any set of labels. +-- In enforcing information flow security Each view may see a different value.+type View = [Label]++-- | Type 'Faceted a' represents (possibly) faceted values.+--+-- <k ? x : y>   ====>  Faceted k x y + +data Faceted a =+    Raw a+  | Faceted Label (Faceted a) (Faceted a)+  deriving (Show, Eq, Typeable)++-- | Functor: For when the function is pure but the argument has facets.+instance Functor Faceted where+  fmap f (Raw v)              = Raw (f v)+  fmap f (Faceted k priv pub) = Faceted k (fmap f priv) (fmap f pub)++-- | Applicative: For when the function and argument both have facets.+instance Applicative Faceted where+  pure x  = Raw x+  (Raw f) <*> x  =  fmap f x+  (Faceted k priv pub) <*> x  =  Faceted k (priv <*> x) (pub <*> x)++-- | Monad: Like applicative, but even more powerful. 'Faceted' the free monad+-- over the function 'Facets a = F Label a a'. +instance Monad Faceted where+  return x = Raw x+  (Raw x)              >>= f  = f x+  (Faceted k priv pub) >>= f  = Faceted k (priv >>= f) (pub >>= f)++++-- | A Branch is a principal or its negatives, and a pc is a set of branches.++data Branch = Public Label | Private Label deriving (Eq, Show)+type PC = [Branch]++-- | << pc ? x : y >>  =====>   pcF pc x y++pcF :: PC -> Faceted a -> Faceted a -> Faceted a+pcF []                      x _ = x+pcF (Private k : branches) x y = Faceted k (pcF branches x y) y+pcF (Public k  : branches) x y = Faceted k y (pcF branches x y)++-- Private+project :: View -> Faceted a -> a+project view (Raw v) = v+project view (Faceted k priv pub)+  | k `elem`    view = project view priv+  | k `notElem` view = project view pub++-- Private+visibleTo :: PC -> View -> Bool+visibleTo pc view = all consistent pc+  where consistent (Private k)  = k `elem` view+        consistent (Public k) = k `notElem` view+++-- | Faceted IO+data FIO a = FIO { runFIO :: PC -> IO a }++-- | Monad is straightforward+instance Monad FIO where+  return x = FIO (\pc -> return x)+  x >>= f  = FIO (\pc -> do v <- runFIO x pc+                            runFIO (f v) pc)+

@@ -0,0 +1,29 @@+{-# LANGUAGE GADTs,RankNTypes,DeriveFunctor #-}++module Faceted.Pure (+  Label,+  Faceted,+  makePrivate,+  makeFaceted,+  makePublic,+  bottom+  ) where++import Faceted.Internal++import Control.Applicative++bottom = Raw undefined++-- | < k ? x : bottom >   ====>  makePrivate k x++makePrivate :: Label -> a -> Faceted a+makePrivate k x = Faceted k (Raw x) (bottom)++-- | x ==> Raw x ===> makePublic x++makePublic :: a -> Faceted a+makePublic x = Raw x++makeFaceted = Faceted+

@@ -0,0 +1,202 @@+Apache License+                           Version 2.0, January 2004+                        http://www.apache.org/licenses/++   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION++   1. Definitions.++      "License" shall mean the terms and conditions for use, reproduction,+      and distribution as defined by Sections 1 through 9 of this document.++      "Licensor" shall mean the copyright owner or entity authorized by+      the copyright owner that is granting the License.++      "Legal Entity" shall mean the union of the acting entity and all+      other entities that control, are controlled by, or are under common+      control with that entity. For the purposes of this definition,+      "control" means (i) the power, direct or indirect, to cause the+      direction or management of such entity, whether by contract or+      otherwise, or (ii) ownership of fifty percent (50%) or more of the+      outstanding shares, or (iii) beneficial ownership of such entity.++      "You" (or "Your") shall mean an individual or Legal Entity+      exercising permissions granted by this License.++      "Source" form shall mean the preferred form for making modifications,+      including but not limited to software source code, documentation+      source, and configuration files.++      "Object" form shall mean any form resulting from mechanical+      transformation or translation of a Source form, including but+      not limited to compiled object code, generated documentation,+      and conversions to other media types.++      "Work" shall mean the work of authorship, whether in Source or+      Object form, made available under the License, as indicated by a+      copyright notice that is included in or attached to the work+      (an example is provided in the Appendix below).++      "Derivative Works" shall mean any work, whether in Source or Object+      form, that is based on (or derived from) the Work and for which the+      editorial revisions, annotations, elaborations, or other modifications+      represent, as a whole, an original work of authorship. For the purposes+      of this License, Derivative Works shall not include works that remain+      separable from, or merely link (or bind by name) to the interfaces of,+      the Work and Derivative Works thereof.++      "Contribution" shall mean any work of authorship, including+      the original version of the Work and any modifications or additions+      to that Work or Derivative Works thereof, that is intentionally+      submitted to Licensor for inclusion in the Work by the copyright owner+      or by an individual or Legal Entity authorized to submit on behalf of+      the copyright owner. For the purposes of this definition, "submitted"+      means any form of electronic, verbal, or written communication sent+      to the Licensor or its representatives, including but not limited to+      communication on electronic mailing lists, source code control systems,+      and issue tracking systems that are managed by, or on behalf of, the+      Licensor for the purpose of discussing and improving the Work, but+      excluding communication that is conspicuously marked or otherwise+      designated in writing by the copyright owner as "Not a Contribution."++      "Contributor" shall mean Licensor and any individual or Legal Entity+      on behalf of whom a Contribution has been received by Licensor and+      subsequently incorporated within the Work.++   2. Grant of Copyright License. Subject to the terms and conditions of+      this License, each Contributor hereby grants to You a perpetual,+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable+      copyright license to reproduce, prepare Derivative Works of,+      publicly display, publicly perform, sublicense, and distribute the+      Work and such Derivative Works in Source or Object form.++   3. Grant of Patent License. Subject to the terms and conditions of+      this License, each Contributor hereby grants to You a perpetual,+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable+      (except as stated in this section) patent license to make, have made,+      use, offer to sell, sell, import, and otherwise transfer the Work,+      where such license applies only to those patent claims licensable+      by such Contributor that are necessarily infringed by their+      Contribution(s) alone or by combination of their Contribution(s)+      with the Work to which such Contribution(s) was submitted. If You+      institute patent litigation against any entity (including a+      cross-claim or counterclaim in a lawsuit) alleging that the Work+      or a Contribution incorporated within the Work constitutes direct+      or contributory patent infringement, then any patent licenses+      granted to You under this License for that Work shall terminate+      as of the date such litigation is filed.++   4. Redistribution. You may reproduce and distribute copies of the+      Work or Derivative Works thereof in any medium, with or without+      modifications, and in Source or Object form, provided that You+      meet the following conditions:++      (a) You must give any other recipients of the Work or+          Derivative Works a copy of this License; and++      (b) You must cause any modified files to carry prominent notices+          stating that You changed the files; and++      (c) You must retain, in the Source form of any Derivative Works+          that You distribute, all copyright, patent, trademark, and+          attribution notices from the Source form of the Work,+          excluding those notices that do not pertain to any part of+          the Derivative Works; and++      (d) If the Work includes a "NOTICE" text file as part of its+          distribution, then any Derivative Works that You distribute must+          include a readable copy of the attribution notices contained+          within such NOTICE file, excluding those notices that do not+          pertain to any part of the Derivative Works, in at least one+          of the following places: within a NOTICE text file distributed+          as part of the Derivative Works; within the Source form or+          documentation, if provided along with the Derivative Works; or,+          within a display generated by the Derivative Works, if and+          wherever such third-party notices normally appear. The contents+          of the NOTICE file are for informational purposes only and+          do not modify the License. You may add Your own attribution+          notices within Derivative Works that You distribute, alongside+          or as an addendum to the NOTICE text from the Work, provided+          that such additional attribution notices cannot be construed+          as modifying the License.++      You may add Your own copyright statement to Your modifications and+      may provide additional or different license terms and conditions+      for use, reproduction, or distribution of Your modifications, or+      for any such Derivative Works as a whole, provided Your use,+      reproduction, and distribution of the Work otherwise complies with+      the conditions stated in this License.++   5. Submission of Contributions. Unless You explicitly state otherwise,+      any Contribution intentionally submitted for inclusion in the Work+      by You to the Licensor shall be under the terms and conditions of+      this License, without any additional terms or conditions.+      Notwithstanding the above, nothing herein shall supersede or modify+      the terms of any separate license agreement you may have executed+      with Licensor regarding such Contributions.++   6. Trademarks. This License does not grant permission to use the trade+      names, trademarks, service marks, or product names of the Licensor,+      except as required for reasonable and customary use in describing the+      origin of the Work and reproducing the content of the NOTICE file.++   7. Disclaimer of Warranty. Unless required by applicable law or+      agreed to in writing, Licensor provides the Work (and each+      Contributor provides its Contributions) on an "AS IS" BASIS,+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or+      implied, including, without limitation, any warranties or conditions+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A+      PARTICULAR PURPOSE. You are solely responsible for determining the+      appropriateness of using or redistributing the Work and assume any+      risks associated with Your exercise of permissions under this License.++   8. Limitation of Liability. In no event and under no legal theory,+      whether in tort (including negligence), contract, or otherwise,+      unless required by applicable law (such as deliberate and grossly+      negligent acts) or agreed to in writing, shall any Contributor be+      liable to You for damages, including any direct, indirect, special,+      incidental, or consequential damages of any character arising as a+      result of this License or out of the use or inability to use the+      Work (including but not limited to damages for loss of goodwill,+      work stoppage, computer failure or malfunction, or any and all+      other commercial damages or losses), even if such Contributor+      has been advised of the possibility of such damages.++   9. Accepting Warranty or Additional Liability. While redistributing+      the Work or Derivative Works thereof, You may choose to offer,+      and charge a fee for, acceptance of support, warranty, indemnity,+      or other liability obligations and/or rights consistent with this+      License. However, in accepting such obligations, You may act only+      on Your own behalf and on Your sole responsibility, not on behalf+      of any other Contributor, and only if You agree to indemnify,+      defend, and hold each Contributor harmless for any liability+      incurred by, or claims asserted against, such Contributor by reason+      of your accepting any such warranty or additional liability.++   END OF TERMS AND CONDITIONS++   APPENDIX: How to apply the Apache License to your work.++      To apply the Apache License to your work, attach the following+      boilerplate notice, with the fields enclosed by brackets "{}"+      replaced with your own identifying information. (Don't include+      the brackets!)  The text should be enclosed in the appropriate+      comment syntax for the file format. We also recommend that a+      file or class name and description of purpose be included on the+      same "printed page" as the copyright notice for easier+      identification within third-party archives.++   Copyright {yyyy} {name of copyright owner}++   Licensed under the Apache License, Version 2.0 (the "License");+   you may not use this file except in compliance with the License.+   You may obtain a copy of the License at++       http://www.apache.org/licenses/LICENSE-2.0++   Unless required by applicable law or agreed to in writing, software+   distributed under the License is distributed on an "AS IS" BASIS,+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.+   See the License for the specific language governing permissions and+   limitations under the License.+

@@ -0,0 +1,2 @@+import Distribution.Simple+main = defaultMain

@@ -0,0 +1,30 @@+name:                faceted+version:             0.0.1.0+synopsis:            Faceted computation for dynamic information flow security+homepage:            http://github.com/haskell-faceted/haskell-faceted+license:             Apache-2.0+license-file:        LICENSE+author:              Kenneth Knowles, Thomas Austin+maintainer:          kenn@kennknowles.com+category:            Security+build-type:          Simple+cabal-version:       >=1.8+description:+  This library provides faceted values and computations for+  enforcing secure information flow.+  .+  A faceted value represents many value simultaneously, depending+  on who is observing, and prevents any observer from viewing+  confidential information that they do not have privileges+  to access.++source-repository head+  type: git+  location: git://github.com/haskell-faceted/haskell-faceted.git++library+  exposed-modules: Faceted+  other-modules: Faceted.Internal, Faceted.FIORef, Faceted.FHandle, Faceted.Pure+  hs-source-dirs: .+  build-depends: base ==4.6.*,+                 free >=4.6