Milestone future
* The following is a note pad of ideas for the 1.0 release. Items may be added or removed.
*** Educational Text - Written to be Unbiased ***
* Provide descriptions of attacks and vulnerabilities in layman's terms.
- What happens to the system during various exploits.
- Root causes. Secondary causes.
- Why the code allowed the exploit.
- Why the compiler allowed the exploit.
- Why the kernel allowed the exploit.
- How to prevent it, both practically and theoretically.
- Current technology, in all operating systems.
- Definition of "trusted system".
* Documented base system source code audit.
- How to use lint.
- Understanding compiler warnings.
- How to use other tools (Valgrind), and understand their output.
* Document user ethics (and rights).
- When to use root, and when not to.
- Administrative users.
- Daemon users.
- Human users.
* Document overview of Linux/Unix permisions (kernel and filesystem).
* Role based access control.
- Document how it works.
- What to consider when adding permissions for files on the system.
* Dynamic linking, shared objects, and static linking.
- Document advantages and disadvantages.
- What is Linux ELF.
* PaX and Grsecurity.
- Provide overview of features, and their relation to previous (above) topics.
- Light overview of competing products, like Selinux, with links.
* Compiler features.
- Document an overview, and the relation to previous topics.
Note: See TracRoadmap for help on using the roadmap.
