Firewall Restriction Using Manifest
Procedures of using manifest restrictions for use in configuring a firewall are described. In an example, an application including manifest defined restrictions for a firewall is executed. The firewall is configured to permit application access, in accordance with the defined restrictions while the application is executing.
1 . A method comprising:
executing a program including a manifest defining firewall restrictions;
configuring a firewall to permit firewall access to the program in accordance with the manifest, while the program is executing.
2 . The method as described in claim 1 , wherein the manifest is signed by an originator.
3 . The method as described in claim 1 , further comprising returning the firewall to a pre-configuration state upon closing the program.
4 . The method as described in claim 1 , wherein the firewall applies the manifest restrictions at a network level.
5 . The method as described in claim 1 , wherein configuring includes opening a firewall port.
6 . The method as described in claim 1 , further comprising requesting user input, if the program is not signed.
7 . The method as described in claim 6 , further comprising adding the program to a firewall policy.
8 . The method as described in claim 1 , wherein the manifest is authored in extensible markup language.
9 . The method as described in claim 1 , wherein the manifest defines an extent of program firewall restriction.
10 . The method as described in claim 1 , wherein the firewall is a platform firewall.
11 . One or more computer-readable media comprising computer-executable instructions that, when executed, direct a computing system to,
access an application manifest to determine application firewall access restrictions; and
apply the application network access restrictions to a firewall to permit network access to the extent permitted.
12 . The one or more computer-readable media as described in claim 11 , further comprising check the manifest for a signature.
13 . The one or more computer-readable media as described in claim 11 , further comprising closing firewall access upon application termination.
14 . The one or more computer-readable media as described in claim 13 , further comprising telemetrically determine attempted access.
15 . The one or more computer-readable media as described in claim 11 , wherein apply the firewall access restrictions includes opening a port.
16 . A system comprising:
a computing device including memory to store a program thereon, the program having a manifest defining program network access; and
a firewall module configured to permit program access based on the manifest.
17 . The system as described in claim 16 , wherein the program performs a task unrelated to firewall module configuration.
18 . The system as described in claim 16 , wherein the computing device terminates program firewall module access when the program is closed.
19 . The system as described in claim 16 , wherein the firewall module is embodied in hardware separate from the computing device.
20 . The system as described in claim 16 , wherein the manifest specifies extent of firewall access.