Recent changes to Architecture

Architecture modified by Serge Lozovsky

Serge Lozovsky — Thu, 04 May 2017 04:03:36 -0000

--- v9
+++ v10
@@ -15,3 +15,6 @@

 Pic. 1

+VXE LKM is VXE Kernel Module. It inspects system calls and applies limitations imposed be VXEDs.
+
+VXE LKM communicates with user space cervices over Netlink. There are two VXE user spcece services Logger and GUI. Logger collects violations reported by LKM. GUI provides REST API and GUI.

Architecture modified by Serge Lozovsky

Serge Lozovsky — Thu, 04 May 2017 03:57:14 -0000

--- v8
+++ v9
@@ -13,5 +13,5 @@

 

-Pic. 1
+Pic. 1

Architecture modified by Serge Lozovsky

Serge Lozovsky — Thu, 04 May 2017 03:55:58 -0000

--- v7
+++ v8
@@ -13,8 +13,5 @@

 

-
-![Pic. 1](https://sourceforge.net/p/vxe/wiki/Architecture/attachment/Screen%20Shot%202017-05-03%20at%208.43.34%20PM.png)
-
+Pic. 1

-![Pic. 1](https://sourceforge.net/p/vxe/wiki/Architecture/attachment/Screen%20Shot%202017-05-03%20at%208.43.34%20PM.png)

Architecture modified by Serge Lozovsky

Serge Lozovsky — Thu, 04 May 2017 03:52:05 -0000

--- v6
+++ v7
@@ -11,6 +11,10 @@

 To make VXED creation easier two modes are available: learning (or logging) and production modes. In learning mode all VXED violations are logged, but allowed. VXE administrator can include resources listed in violations into VXED. In production mode violations are logged and offending system calls are denied.

+
+
 
 ![Pic. 1](https://sourceforge.net/p/vxe/wiki/Architecture/attachment/Screen%20Shot%202017-05-03%20at%208.43.34%20PM.png)
 
+
+![Pic. 1](https://sourceforge.net/p/vxe/wiki/Architecture/attachment/Screen%20Shot%202017-05-03%20at%208.43.34%20PM.png)

Architecture modified by Serge Lozovsky

Serge Lozovsky — Thu, 04 May 2017 03:50:28 -0000

--- v5
+++ v6
@@ -11,6 +11,6 @@

 To make VXED creation easier two modes are available: learning (or logging) and production modes. In learning mode all VXED violations are logged, but allowed. VXE administrator can include resources listed in violations into VXED. In production mode violations are logged and offending system calls are denied.

-[[img src=Screen%20Shot%202017-05-03%20at%208.43.34%20PM.png alt=Pic1]]
-
+
 ![Pic. 1](https://sourceforge.net/p/vxe/wiki/Architecture/attachment/Screen%20Shot%202017-05-03%20at%208.43.34%20PM.png)
+

Architecture modified by Serge Lozovsky

Serge Lozovsky — Thu, 04 May 2017 03:47:07 -0000

--- v4
+++ v5
@@ -11,4 +11,6 @@

 To make VXED creation easier two modes are available: learning (or logging) and production modes. In learning mode all VXED violations are logged, but allowed. VXE administrator can include resources listed in violations into VXED. In production mode violations are logged and offending system calls are denied.

+[[img src=Screen%20Shot%202017-05-03%20at%208.43.34%20PM.png alt=Pic1]]
+
 ![Pic. 1](https://sourceforge.net/p/vxe/wiki/Architecture/attachment/Screen%20Shot%202017-05-03%20at%208.43.34%20PM.png)

Architecture modified by Serge Lozovsky

Serge Lozovsky — Thu, 04 May 2017 03:44:41 -0000

--- v3
+++ v4
@@ -11,4 +11,4 @@

 To make VXED creation easier two modes are available: learning (or logging) and production modes. In learning mode all VXED violations are logged, but allowed. VXE administrator can include resources listed in violations into VXED. In production mode violations are logged and offending system calls are denied.

-![Pic. 1](https://sourceforge.net/p/vxe/wiki/Architecture/attachment/Screen%20Shot%202017-05-03%20at%208.40.12%20PM.png)
+![Pic. 1](https://sourceforge.net/p/vxe/wiki/Architecture/attachment/Screen%20Shot%202017-05-03%20at%208.43.34%20PM.png)

Architecture modified by Serge Lozovsky

Serge Lozovsky — Thu, 04 May 2017 03:42:39 -0000

--- v2
+++ v3
@@ -10,3 +10,5 @@
 VXEI - VXE Instance; runtime instance governed by VXED;

 To make VXED creation easier two modes are available: learning (or logging) and production modes. In learning mode all VXED violations are logged, but allowed. VXE administrator can include resources listed in violations into VXED. In production mode violations are logged and offending system calls are denied.
+
+![Pic. 1](https://sourceforge.net/p/vxe/wiki/Architecture/attachment/Screen%20Shot%202017-05-03%20at%208.40.12%20PM.png)

Architecture modified by Serge Lozovsky

Serge Lozovsky — Thu, 04 May 2017 03:38:25 -0000

--- v1
+++ v2
@@ -1 +1,12 @@
 # Architecture Overivew
+VXE creates virtual environment (VE, security domain or a sandbox), by defining resorces available to a subsystem. Where subsystem is some initial process and its subprocesses. Resources are defined in terms of syscalls and their arguments.
+
+Term definitions:
+
+VXE - Virtual Execution Environment;
+
+VXED - VXE Definition; description of resorces available for the subsystem;
+
+VXEI - VXE Instance; runtime instance governed by VXED;
+
+To make VXED creation easier two modes are available: learning (or logging) and production modes. In learning mode all VXED violations are logged, but allowed. VXE administrator can include resources listed in violations into VXED. In production mode violations are logged and offending system calls are denied.

Architecture modified by Serge Lozovsky

Serge Lozovsky — Thu, 04 May 2017 03:25:30 -0000