IBM 10 SP1 EAL4 6.8.2 Summary of trusted processes interfaces

6.8.1.7.3 Data structures
device_struct fs/devices.c
file_operations include/linux/fs.h
block_device_operati
ons
include/linux/fs.h
6.8.1.8 Kernel subsystems kernel modules
This section lists external interfaces, internal interfaces, and data structures of the kernel modules subsystem.
6.8.1.8.1 External interfaces (system calls)
•TSFI system calls
•Non_TSFI system calls
System calls are listed in the Functional Specification mapping table.
6.8.1.8.2 Internal interfaces
Module dependent.
6.8.1.8.3 Data structures
Module dependent.
6.8.2 Summary of trusted processes interfaces
Trusted processes need to use system calls when they need the functions of a kernel subsystem. The interfaces
to the kernel subsystems, therefore, are only the system calls. Trusted processes can communicate with each
other using the named objects provided by the kernel, which are files and IPC objects. There is no way for
trusted processes to communicate with other without using those primitives provided by the kernel.
As described in the functional specification, trusted processes use configuration files as an external interface
used to define their behavior. Those configuration files are described as man pages in the functional
specification, and their use by the trusted processes is described in this document in the sections about the
individual trusted processes.
231