|
|
The rules for trust are different for commands and library routines. These rules are described in detail in the remaining sections.
Trust is achieved by following all rules that pertain to writing a given piece of software and by documenting the methods used to follow those rules. This documentation must be supplied with every piece of trusted software. It describes the circumstances under which it is trusted, the methods used to make it trusted, and warnings about any practices that might jeopardize the trust placed in the software.
As with all code that is to be incorporated in a running system, trusted software needs to be reviewed and tested before it is installed. You can have reviewers and testers read the sections in this topic so that they can familiarize themselves with the special requirements for trusted software.