Milestone future

No date set

0%

Closed tickets:
0
Active tickets:
1
HLFS Book

0/1

* The following is a note pad of ideas for the 1.0 release. Items may be added or removed.

*** Educational Text - Written to be Unbiased ***

* Provide descriptions of attacks and vulnerabilities in layman's terms.

  • What happens to the system during various exploits.
    • Root causes. Secondary causes.
    • Why the code allowed the exploit.
    • Why the compiler allowed the exploit.
    • Why the kernel allowed the exploit.
  • How to prevent it, both practically and theoretically.
    • Current technology, in all operating systems.
    • Definition of "trusted system".

* Documented base system source code audit.

  • How to use lint.
  • Understanding compiler warnings.
  • How to use other tools (Valgrind), and understand their output.

* Document user ethics (and rights).

  • When to use root, and when not to.
  • Administrative users.
  • Daemon users.
  • Human users.

* Document overview of Linux/Unix permisions (kernel and filesystem).

* Role based access control.

  • Document how it works.
  • What to consider when adding permissions for files on the system.

* Dynamic linking, shared objects, and static linking.

  • Document advantages and disadvantages.
  • What is Linux ELF.

* PaX and Grsecurity.

  • Provide overview of features, and their relation to previous (above) topics.
  • Light overview of competing products, like Selinux, with links.

* Compiler features.

  • Document an overview, and the relation to previous topics.
Note: See TracRoadmap for help on using the roadmap.