122 lines
4.4 KiB
JSON
122 lines
4.4 KiB
JSON
{
|
|
"parent-mode": {
|
|
"reason": "metadata",
|
|
"meaning": "Private parent mode is exact0700",
|
|
"semantic_source": "DESIGN.md:119; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:659",
|
|
"exact_reason_token": "reason=metadata "
|
|
},
|
|
"parent-owner": {
|
|
"reason": "metadata",
|
|
"meaning": "Parent owner is stack uid",
|
|
"semantic_source": "DESIGN.md:119; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:659",
|
|
"exact_reason_token": "reason=metadata "
|
|
},
|
|
"socket-mode": {
|
|
"reason": "metadata",
|
|
"meaning": "Socket mode is exact0600",
|
|
"semantic_source": "DESIGN.md:120; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:659",
|
|
"exact_reason_token": "reason=metadata "
|
|
},
|
|
"socket-owner": {
|
|
"reason": "metadata",
|
|
"meaning": "Socket owner is stack uid",
|
|
"semantic_source": "DESIGN.md:120; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:659",
|
|
"exact_reason_token": "reason=metadata "
|
|
},
|
|
"socket-type": {
|
|
"reason": "metadata",
|
|
"meaning": "Final entry is socket",
|
|
"semantic_source": "DESIGN.md:119; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:659",
|
|
"exact_reason_token": "reason=metadata "
|
|
},
|
|
"symlink": {
|
|
"reason": "metadata",
|
|
"meaning": "Final entry is not symlink",
|
|
"semantic_source": "DESIGN.md:119; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:659",
|
|
"exact_reason_token": "reason=metadata "
|
|
},
|
|
"peer": {
|
|
"reason": "peer",
|
|
"meaning": "Connected uid equals stack uid",
|
|
"semantic_source": "DESIGN.md:136; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:665",
|
|
"exact_reason_token": "reason=peer "
|
|
},
|
|
"peer-pid": {
|
|
"reason": "peer",
|
|
"meaning": "Connected pid equals MainPID",
|
|
"semantic_source": "DESIGN.md:136; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:665",
|
|
"exact_reason_token": "reason=peer "
|
|
},
|
|
"python-mode": {
|
|
"reason": "interpreter",
|
|
"meaning": "Fixed system interpreter safely owned and protected",
|
|
"semantic_source": "DESIGN.md:126; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:660",
|
|
"exact_reason_token": "reason=interpreter "
|
|
},
|
|
"python-missing": {
|
|
"reason": "interpreter",
|
|
"meaning": "Missing system Python is failed observation",
|
|
"semantic_source": "DESIGN.md:129; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:660",
|
|
"exact_reason_token": "reason=interpreter "
|
|
},
|
|
"python-not-elf": {
|
|
"reason": "interpreter",
|
|
"meaning": "System entry target is ELF",
|
|
"semantic_source": "DESIGN.md:126; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:660",
|
|
"exact_reason_token": "reason=interpreter "
|
|
},
|
|
"peer-malformed": {
|
|
"reason": "probe",
|
|
"meaning": "Probe returns only exactly pid uid gid",
|
|
"semantic_source": "DESIGN.md:135; DESIGN.md:163; BUILD.md:17; mos-1293 item2 explicitly reason=probe",
|
|
"code_label_location": "scripts/case1-accept.sh:666",
|
|
"exact_reason_token": "reason=probe "
|
|
},
|
|
"peer-error": {
|
|
"reason": "probe-inner-command",
|
|
"meaning": "Nonzero child output discarded, distinct child failure",
|
|
"semantic_source": "DESIGN-C4.md:84-85; BUILD.md:175; BUILD.md:177",
|
|
"code_label_location": "scripts/case1-accept.sh:662; tester_capture_reason",
|
|
"exact_reason_token": "reason=probe-inner-command "
|
|
},
|
|
"peer-uid-fields": {
|
|
"reason": "metadata",
|
|
"meaning": "MainPID four proc uid fields equal stack uid",
|
|
"semantic_source": "DESIGN.md:118; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:659",
|
|
"exact_reason_token": "reason=metadata "
|
|
},
|
|
"changed-inode": {
|
|
"reason": "changed",
|
|
"meaning": "Snapshot replacement fails observation",
|
|
"semantic_source": "DESIGN.md:120; DESIGN.md:121; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:668",
|
|
"exact_reason_token": "reason=changed "
|
|
},
|
|
"changed-pid": {
|
|
"reason": "changed",
|
|
"meaning": "MainPID change fails observation",
|
|
"semantic_source": "DESIGN.md:121; BUILD.md:17",
|
|
"code_label_location": "scripts/case1-accept.sh:668",
|
|
"exact_reason_token": "reason=changed "
|
|
},
|
|
"floor": {
|
|
"reason": "floor",
|
|
"meaning": "Numeric floor above privileged Console port",
|
|
"semantic_source": "DESIGN.md:122; DESIGN.md:123",
|
|
"code_label_location": "scripts/case1-accept.sh:658",
|
|
"exact_reason_token": "reason=floor "
|
|
}
|
|
}
|