The plan is to implement a safe path resolution library for Linux to avoid the plentiful numbers of security vulnerabilities that have been seen in the wild related to path resolution race conditions and various other attacks. I've been working on kernel-space solutions but even if they were merged, it is difficult to use them safely directly. So this library intends to provide simple wrappers that everyone can use.

https://github.com/openSUSE/libpathrs

Looking for hackers with the skills:

security filesystem rust

This project is part of:

Hack Week 18

Activity

  • almost 5 years ago: cyphar liked this project.
  • almost 5 years ago: cyphar added keyword "security" to this project.
  • almost 5 years ago: cyphar added keyword "filesystem" to this project.
  • almost 5 years ago: cyphar added keyword "rust" to this project.
  • almost 5 years ago: cyphar started this project.
  • almost 5 years ago: cyphar originated this project.

  • Comments

    Be the first to comment!

    Similar Projects

    Port NeuVector zero-trust security functions to host/VM by feih

    Project Description

    Today, NeuVector on...


    Model checking the BPF verifier by shunghsiyu

    Project Description

    BPF verifier plays a ...


    Predefined app security policy template for NeuVector by feih

    Project Description

    Idea is to predefin...


    HelenOS: <filesystem> of a down by jjindrak

    During the previous Hackweek [0], I have succes...


    (Rust) Manage systems in NetBox using NetBox-Sync by chock

    [comment]: # (Please use the project descriptio...


    Waysettings by dspinella

    [comment]: # (Please use the project descriptio...


    Kanidm - Account Policy by firstyear

    Project Description

    Kanidm is a identity ...


    A set of utilities to produce a "from scratch" OCI/Docker container using Opensuse/SLE rpms by ldragon

    [comment]: # (Please use the project descriptio...


    A Flight Dynamics Library written in Rust with an Entity Component System architecture by vcuadradojuan

    [comment]: # (Please use the project descriptio...