Trusted updates
AssigneeMcAfee, Inc.
InventorsPreet Mohinder, Ratnesh Pandey, Jaskaran Singh Khurana, Amritanshu Johri
Life of this patent
Estimating the term…
Abstract
There is disclosed in one example a computing apparatus, including: a hardware platform including a processor and a memory; and instructions encoded within the memory to instruct the processor to: provide a permission list; allocate an executable, the executable to have permissions according to the permission list; designate a child object of the executable; allocate a certificate for the child object; and after a system reboot, grant the child object permissions of the executable after validating the certificate.
Claims20
A computing apparatus, comprising:
- a hardware platform comprising a processor circuit and a memory;
- and
- instructions encoded within the memory to instruct the processor to:
- provide a permission list;
- allocate an executable, the executable to have permissions according to the permission list;
- designate a child object of the executable;
- allocate a certificate for the child object;
- and
- after a system reboot, grant the child object permissions of the executable after validating the certificate.
One or more tangible, non-transitory computer-readable storage media, comprising instructions to:
- allocate an object permission data structure;
- assign to an updater object permissions from the object permission data structure, the permissions including permission to operate on a set of files;
- propagate the permissions to a child object of the updater object;
- assign the child object a cryptographically-verifiable certificate;
- and
- after the updater object and child object have terminated, verify the certificate and re-assign the permissions to the child object.
A computer-implemented method of providing inheritable permissions, comprising:
- allocating an updater binary, the updater binary to update an executable object;
- assigning permissions to the updater binary, including permissions to operate on a set of files;
- allocating a child of the updater binary;
- associating a certificate with the child;
- assigning the permissions to the child as inherited permissions;
- and
- after a system reset event, causing the child to re-inherit the inherited permissions upon validating the certificate.
Dependencies are inferred from the claim text.