IKeplerSecurityModule

​

Interface IKeplerSecurityModule

interface IKeplerSecurityModule

Extends com.amazon.apmf.IStandard An interface for the top-level Kepler Security module.

​

Methods

​

getCurrentContextCredential()

com.amazon.apmf.ICredential* getCurrentContextCredential()

Get the credential associated with the current security context.

​

Returns

com.amazon.apmf.ICredential* a credential for the current security context

---

​

findCredentialForUnixPrincipal()

com.amazon.apmf.ICredential* findCredentialForUnixPrincipal(com.amazon.apmf.ICredential* authCredential, string securityLabel, i32 uid)

Get a credential using the security label and uid of a process. This is primarily an adapter for getting a credential using the information attached to an AIPC session.

​

Parameters

authCredential

com.amazon.apmf.ICredential* — Required The credential used to authorize getting the requested credential

securityLabel

string — Required The security label (such as smack label) of a process

uid

i32 — Required The uid of the process

​

Returns

com.amazon.apmf.ICredential* An ICredential* for the identified security context.

---

​

requestPrivilegeForCurrentContext()

bool requestPrivilegeForCurrentContext(string privilege)

Ask to enable a privilege for the current security context Generally this is used to display a UI element that allows device users to decide whether or not to grant an application access to a privilege.

​

Parameters

privilege

string — Required The privilege name to request

​

Returns

bool True if the privilege is enabled, otherwise false

---