Changes between Version 2 and Version 3 of FutureHaiku/Security


Ignore:
Timestamp:
Dec 11, 2018, 3:34:10 AM (6 years ago)
Author:
waddlesplash
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • FutureHaiku/Security

    v2 v3  
    11== Low-Hanging Fruit ==
    22
     3 * Audit filesystem privilege checks
     4 * Audit permissions of all folders in the default install
    35 * Audit all syscalls & ioctls (_control) for privilege checks.
    46   * _area functions probably need a lot of thinking here
    57 * Run the userland as a non-privileged user
    6  * Don't allow opening files by inode (requires ABI break)
    78 * Fuzz all in-tree parsers
    89   * driver settings format
    910   * message
    1011   * rdef
    11  
    1212
    1313== Moderate ==
    1414
    15  * {{{W^X}}}
     15 * {{{W^X}}} (now [https://git.haiku-os.org/haiku/commit/?id=cb0977326dd79327ff3e342816e0dd118019b058 done] for kernelspace)
     16 * Don't allow opening files by inode (requires ABI break)
     17 * devfs filemodes
    1618
    1719== Advanced ==
    1820
     21 * [https://netbsd.org/gallery/presentations/maxv/kleak.pdf NetBSD/FreeBSD's KLEAK: Detecting Kernel Memory Disclosures]
    1922 * [https://www.openbsd.org/papers/eurobsdcon2018-rop.pdf OpenBSD on mitigating ROP gadgets]
    2023 * [https://twitter.com/tehjh/status/1046042401830309888?s=09 AT_BENEATH and other breakout mitigations for VFS]