The plan is to implement a safe path resolution library for Linux to avoid the plentiful numbers of security vulnerabilities that have been seen in the wild related to path resolution race conditions and various other attacks. I've been working on kernel-space solutions but even if they were merged, it is difficult to use them safely directly. So this library intends to provide simple wrappers that everyone can use.

https://github.com/openSUSE/libpathrs

Looking for hackers with the skills:

security filesystem rust

This project is part of:

Hack Week 18

Activity

  • about 3 years ago: cyphar liked this project.
  • about 3 years ago: cyphar added keyword "security" to this project.
  • about 3 years ago: cyphar added keyword "filesystem" to this project.
  • about 3 years ago: cyphar added keyword "rust" to this project.
  • about 3 years ago: cyphar started this project.
  • about 3 years ago: cyphar originated this project.

  • Comments

    Be the first to comment!

    Similar Projects

    FIDO2 emulation by mkoutny

    [comment]: # (Please use the project descriptio...


    Learn more about Application Security (AppSec) Open Source Tools and Testing Techniques by heidi.bronson

    [comment]: # (Please use the project descriptio...


    Project Verifree : internal key server(s) by mcaj

    Project description

    The project Verifree...


    Model checking the BPF verifier by shunghsiyu

    Project Description

    BPF verifier plays a ...


    Kanidm - Modern Opensource Identity Management by firstyear

    Project Description

    Kanidm is a identity ma...


    HelenOS: <filesystem> of a down by jjindrak

    During the previous Hackweek [0], I have succes...


    Give back to Wezterm by mpagot

    [comment]: # (Please use the project descriptio...


    Continue work on "ostatus" by aplanas

    Project Description

    [ostatus](https://git...


    Implement search in zellij by MSirringhaus

    Project Description

    [zellij](https://gith...


    Learn Rust from scratch by pherranz

    Project Description

    As I do not work as a d...


    Project Verifree : internal key server(s) by mcaj

    Project description

    The project Verifree...