Skip to content

Latest commit

 

History

History
96 lines (63 loc) · 1.49 KB

README.rst

File metadata and controls

96 lines (63 loc) · 1.49 KB

MiracleWhiteKnight

What is MiracleWhiteKnight

This is a a project which provides mandatory access control based on allow list and protects the list in Trusted Execution Environment.

Requirements

Name When Version
openssl build & runtime 1.1.1c or later
meson build 0.49 or later
ninja build  
pkg-config build  
gcc build  

How to install

  1. Build binaries.

    $ meson build
$ ninja -C build

  2. Install the built binaries.

    $ ninja -C build install

How to use

MiracleWhiteKnight provides 2 management methods for allow list.

  1. Do not use TEE
  2. Use TEE

Do not use TEE

  1. Make a list of directories to search executables

    $ echo '/usr' > in.txt

  2. Generate allow list of your root filesystem

    # mkag rootfs.wl in.txt
# mv rootfs.wl /usr/share/whiteknight/wl.d/

  3. Generate a list of mount points

    # echo '/' > /usr/share/whiteknight/ml.d/rootfs.ml

  4. Run MiracleWhiteKnight

    # systemctl start whiteknight

Use TEE

Coming soon...

Contribution

Please send PRs via GitHub. We are waiting for your contribution anytime!