Files
bot-formal-models/tla/models/attacker_nodes_allowlist_ok.cfg

25 lines
672 B
INI

SPECIFICATION Spec
INVARIANT Inv_NoSensitiveExecInShared
CONSTANTS
Tools = {"memory_get", "memory_search", "nodes.run", "message.send"}
SensitiveTools = {"memory_get", "memory_search", "nodes.run"}
PolicyAllowShared = {"message.send", "nodes.run"}
PolicyAllowMain = {"memory_get", "memory_search", "nodes.run", "message.send"}
NodesRunTool = "nodes.run"
NodeCommands = {"system.run", "system.notify"}
NodesRunCommand = "system.run"
\* Deny system.run at gateway level
PlatformDefaults = {"system.run", "system.notify"}
ExtraAllow = {}
Deny = {"system.run"}
DeclaredByNode = {"system.run", "system.notify"}
MaxQueueLen = 3
MaxExecLen = 3