MiracleWhiteKnight

This is a a project which provides mandatory access control based on allow list and protects the list in Trusted Execution Environment.

1. Build binaries.

   $ meson build
   $ ninja -C build

2. Install the built binaries.

   $ ninja -C build install

MiracleWhiteKnight provides 2 management methods for allow list.

1. Do not use TEE
2. Use TEE

1. Make a list of directories to search executables

   $ echo '/usr' > in.txt

2. Generate allow list of your root filesystem

   # mkag rootfs.wl in.txt
   # mv rootfs.wl /usr/share/whiteknight/wl.d/

3. Generate a list of mount points

   # echo '/' > /usr/share/whiteknight/ml.d/rootfs.ml

4. Run MiracleWhiteKnight

   # systemctl start whiteknight

Coming soon...

Please send PRs via GitHub. We are waiting for your contribution anytime!