TC comment for sharing of physical media
还没有人认领这个 Issue。
评估
- 难度
- 5/5
- 预计耗时
- 一周以上
- 新手友好度
- 20/100
- Issue 类型
- 文档
- 描述清晰度
- 需要澄清
- 活跃度
- 停滞
调研方向
Start with the TC comment and the editor note, then review FDP_VMS_EXT.1 and FDP_RIP_EXT.2 in the protection profile. Determine whether the proposed warning or data-sharing requirement belongs in a future version; done would mean an agreed specification change, not just further discussion.
由索引模型根据 Issue 内容生成。
描述
Comment from TC:
5.1.7 Protection of the TSF (FPT) / FPT_RDM_EXT.1 Removable Devices and Media / FPT_RDM_EXT.1.2
Care has been taken to specify the dangers of sharing removable media between domains. How about a physical device like a hard disk that is passed through knowingly to 2 separate VMs. Should there be something like a warning on VM launch that the HD is available to another VM (that may not be currently powered up)? Definitely sounds problematic to implement though. I am suggesting it because it presents the same issues that removable media does.
NIAP response: this will be addressed in a future version.
Editor note:
I think this is partially covered by FDP_VMS_EXT.1. FDP_VMS_EXT.1.4 says that data can only be read or transferred to or from another Guest VM except for either virtual networking or some other mechanism explicitly specified by the ST author. You could look at this as prohibiting two Guest VMs from being able to read the same physical storage unless the ST specifically defines what you're describing here as a way to do that.
And then FDP_RIP_EXT.2 requires clearing of physical disk storage when being allocated to a Guest VM, specifically to prevent a case where a Guest VM has access to storage previously used by a different one.
For the future I would suggest tacking on another element to FDP_VMS_EXT.1 where we have the ST author specify what, if any, warnings or other mechanisms the TOE has to indicate when data sharing is allowed.
- 主要语言
- Makefile
- 星标
- 3
- 派生
- 0
- PR 合并指标
- 30 天内没有已合并 PR
环境准备
这个项目没有提供开发容器、Dockerfile 或贡献指南，环境需要你自己搭建：先看它的 README，通用步骤见我们的新手贡献指南。
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
commoncriteria/virtualization 的其他 Issue
-
难度 3/5 1-2 天 新手友好度 45/100
-
Password KDF未关闭
难度 5/5 一周以上 新手友好度 25/100
-
难度 5/5 一周以上 新手友好度 20/100
-
难度 5/5 一周以上 新手友好度 25/100
commoncriteria/virtualization#74 · 2 条评论 ·
-
难度 1/5 1 小时以内 新手友好度 10/100
查看 commoncriteria/virtualization 的全部 Issue
相似的 Issue
-
Cleanup Setup可能已有人在做 @AlexanderKaran 今天认领。 未关闭documentation enhancement
难度 2/5 1-3 小时 新手友好度 64/100
e18e/framework-tracker#769 ·
维护者通常 1 天内回复
-
bug v2
难度 1/5 1 小时以内 新手友好度 88/100
modelcontextprotocol/servers#5483 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 84/100
simonw/sqlite-utils#928 ·
维护者通常 3 天内回复
-
agentic-workflows automation repo-assist
难度 1/5 1 小时以内 新手友好度 85/100
shanselman/winget-tui#483 ·
维护者通常 2 天内回复
-
难度 1/5 1 小时以内 新手友好度 90/100
griptape-ai/griptape-nodes-library-elevenlabs#30 ·
维护者通常 1 天内回复