hermes icon indicating copy to clipboard operation
hermes copied to clipboard

Provide authentication mechanisms for Hermes

Open lukemartinlogan opened this issue 2 years ago • 0 comments

For maintaining security guarantees, we can make it so that each process connects to the runtime using a POSIX domain socket. We can obtain process credentials (user, group, etc) and store in a table.

We can then create either per-process or per-user queues (per-user would possibly save some memory, but would have the potential for faulty processes to spread their malice to non-faulty processes by corrupting a queue). We could also implement grouped process queues for MPI-based programs, where each process in a group shares a queue.

This way there are privilege guarantees regarding how programs can interact with the Hermes runtime.

lukemartinlogan avatar Sep 08 '23 06:09 lukemartinlogan