allowd
Memory-safe policy rules using D-Bus
Authentication and authorization are crucial components of a modern Linux system's security. For the desktop Linux environment, Polkit is used as a central authentication and authorization component. But ever since 2012, its policy rules have been based on JavaScript. Requiring a garbage-collected programming language to be started up for the tiny snippets of rules is excessive, especially in resource-constrained environments. We will prototype an alternative approach to the current Polkit daemon, utilizing the existing external D-Bus interfaces, but improving the internal design. We also aim to demonstrate to the Freedesktop community, especially the systemd team, that Rust is well-suited for these core desktop applications, producing small and efficient binaries with limited dependencies.
- The project's own website: https://github.com/trifectatechfoundation
Run by Trifecta Tech Foundation and Zeeshan Ali Khan
This project was funded through the NGI0 Commons Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology under grant agreement No 101135429. Additional funding is made available by the Swiss State Secretariat for Education, Research and Innovation (SERI).
