Persistency KVS Requirements Collector

[guysagnes]

Please add here additional Persistency-KVS Library requirements needed for your functionality.
While the related PRs are open you can add your proposals directly there.
If there is NO open PR available please add them as comment in the following format

[ft][requester][read/write]: requirement

Similar collector as #1439

[vbogdanb]

[persistency][@vbogdanb][read]
Future Extensions
The component shall provide a read only version of KVS

Why:

• Prevents unintended modifications to critical configuration or state data. For example when used by Configuration Manager if required for some static configuration
• Ensures that clients with read-only access cannot alter or corrupt persisted data or in-memory state.
• Supports principle of least privilege: consumers needing only read access should not be exposed to mutation APIs.
• Enables safe concurrent access to shared KVS instances by multiple readers without requiring locks for mutation.
• Suitable for audit/logging subsystems, analytics engines, or remote monitoring tools that must observe data without modifying it.
• Supports configurations that are meant to be immutable post-initialization (e.g., secure boot parameters or default settings in production).

[guysagnes]

@umaucher

• to be considered the update of the content of readonly information including format evolution.

@vbogdanb
The Readonly access should be assumed at least on API logical level .

[Ahmed-Elsaka-JC]

score-per should provide the capability for applications to set permissions on created KVS files.

• This will enable applications to secure their KVS files, preventing unauthorized read or write access by other processes.
• Additionally, I recommend that the default permission for files created by score-per be set to 644

[sorinmold]

Discussed in the meeting on 07.08.2025 that we can set the file permission by default to 644.
This setting can be changed via configuration - per process.
Additional SE Linux restrictions can be added via project configuration.