SEC18 — CCM spec and Security Service 1.7 do not agree

The CCM spec changed some of the interfaces in the Security Service to
local ones. However, apparenlty some interfaces were not made local
that should be made local, if understand things correctly. Here are
suggested changes:

1. The SecurityLevel2::TargetCredentials interface is derived
from the Credentials object, which the CCM spec made
local. This means that the TargetCredentials interface
must also be declared local.

2. The SecurityLevel2::SecurityManager interface is apparently
locality constrained (please improve/add comment), but the
CCM spec does not change its interface to be local. This
is a problem since the
SecurityManager::remove_own_credentials() method takes a
"in Credentials creds" parameter, i.e.:

void remove_own_credentials(
in Credentials creds
);

but the CCM spec changes the Credentials interface to be
local. As such, the SecurityLevel2::SecurityManager
interface should also be local in the CCM spec in order for
the above method to be valid.

No Data Available