Framework Navigator

Overview

The Framework Navigator displays a breakdown of CDS Framework Toolkit projects into their underlying systems and then a breakdown of each system into the underlying security architecture items that make up that system. The Framework Navigator displays a hierarchical view of these items. For example, if a domain has children, that domain can be expanded in the Framework Navigator view to display the children that it contains.

Getting to the Framework Navigator

To use the Framework Navigator, first make sure that Eclipse is in the CDS Framework Perspective. To do this select Window ->Open Perspective->Other...->CDS Framework. To open the Framework Navigator, select Window ->Show View->Framework Navigator.

The figure to the left displays a sample of the Framework Navigator View. Below is a description of the items and features within this example:

  1. Project

    The project displayed here is demo and has been expanded to show its underlying systems.

  2. System

    The system contained within demo is guard. Although this sample view only shows one system, multiple systems can exist within a project. Each system represents a complete security architecture that will be translated to a SELinux policy that can be installed on a physical machine. Double clicking on a system will open the system in the graphical editor. The system here has been expanded to show its components.

  3. Policy Items

    Displayed is a portion of the security architecture component items that can be found in the system, guard. This sample also demonstrates hierarchy. Both domains, High and Low are decomposed into other domains and resources. The resource, Middle which is at the same level as High and Low is not decomposed. Only domains can make use of decomposition.

  4. Custom Additions

    Custom additions displays the custom base domains, base resources and abilities specific to the project. These custom additions are hooks into the SELinux Reference Policy that defines general system policy of which this project is building on top of.


Selection is synchronized between the Framework Navigator and the Graphical Editor. As an item is selected in one, the other changes selection also.

©2005 - 2009 Tresys Technology, LLC
Patent Pending