Friday, January 20, 2006

Project Eva

I've began work on "Project Eva," a personal project to design a new, secure Linux distribution. This is not a typical distribution; it will base neither on Red Hat, Gentoo, or Debian GNU/Linux. Instead, I will be building from the ground up, using a package manager I'm designing and coding myself in a project called "Project Coon Fox."

Project Eva will not be a simple hack-up job of packaging up the Hardened Gentoo or Adamantix efforts in another form and shipping them out. Instead, Project Eva will use a kernel designed and built specifically for Project Eva.

New kernel modifications will be designed from scratch based on the documentation, code, and conceptual efforts that manifest as PaX, GrSecurity, OpenBSD, and Red Hat. The most useful, most secure designs possible will be implemented based on the existing efforts. These new implementations will tightly integrate with the kernel, and will target mainline inclusion.

Our integration scheme is to treat program execution without enhancements such as address space layout randomization or data/code separation as privileged, and grant that privilege system-wide. Various systems to restrict or decline these "privileges" will be put in place, including robust LSM hooks and SELinux policy enhancements. Further, various levels of restriction will be allowed, giving fine-grained control over things some programs are tempermental over, such as the amount of entropy in and general layout of a randomized address space.

Project Eva will be based around the output of Project Coon Fox, my packager project. Project Coon Fox uses its own install scripts on an extensible scripting engine, allowing a complete audit of all actions to be generated before any system changes are made. Simple heuristics can allow for targeting of dangerous operations, such as changes to file associations; SUID and SGID bits; SELinux policies that grant permissions outside the default system policy; or changes to start-up scripts.

The heuristics in Project Coon Fox can also be designed to hard-deny certain operations, such as granting modification access to /bin or allowing alteration of security policies, things only the package manager should control. By properly utilizing these types of controls, installed trojan programs (viruses, spyware) can be easily uninstalled without potential to replicate across the system; infections can only affect users who ran the installed trojans.

Project Coon Fox also dissociates package-for-package dependency and conflict schemes, similar to autopackage, using a more robust system to allow easier download-and-install options from foreign sources. With proper security policies, this becomes somewhat safe; with basic use of the simplified auditing interfaces, this becomes mostly safe. Installation of spyware becomes easily recognizable, i.e. random added security policy privileges and SUID bits; and stripping of these privileges can be undone if the program fails to work properly and can be confirmed safe (by a quick Google).

The founding principles of Project Eva are as follows: Security increases productivity; C is secure; and security is cheap to implement. Today's so-called security experts will immediately choke on any of these and begin a long and pointless speech about how every one of these conflicts with everything we know; I have to do this, because nobody else can.

See you in a few years, with the finished product.

41 Comments:

Blogger EmmieJDriskell said...

cool..................................................

10:28 PM  
Blogger 雪糕 said...

Always keep your words soft and sweet, just in case you have to eat them.............................................

6:54 AM  
Blogger 春天來嚕 said...

KK777一夜激情聊天live show成人自拍貼圖自慰少婦自拍裸體圖片台灣色情成人網站情人視訊網情色留言板視訊美女免費視訊聊天室限制級極度震撼情色論壇色情特區自拍裸女貼圖潮吹性影片觀賞小穴情色片a圖片sex story性愛影片美女做愛成人色情網站性愛圖片成人情色貼圖全裸寫真集圖片走光圖女生陰毛自慰影片色情av1007成人色情聊天室女生自慰裸體照成人影音聊天台灣色情網站色情片打手槍情色天堂成人視訊聊天免費情色網站av網超性感辣妹激突成人論壇情色視訊聊天鹹濕成人網站av成人論壇免費美女視訊

6:52 AM  
Blogger 宥軒 said...

All roads lead to Rome. 堅持自己所選! ........................................

1:09 AM  
Blogger 寧年寧年 said...

faith will move mountains. ..................................................

6:54 AM  
Blogger 水憲妤慧 said...

安心亞寫真top1069拓網交友做愛自拍免費情色影片寫真集美女正妹照片正妹貼圖正妹視訊250av女優免費影片旺來出品辣妹寫真鋼管秀旺來風情寫真秀-辣妹過招旺來風情寫真秀旺來蓬萊仙山寫真集 vcd旺旺仙貝的狂想境地早洩韭南籽早期歐美a片早期范冰冰照片早春小老婆日本三性影片美女 視訊洪爺sex免費看a片論壇秘密情人影音視訊網 bt成人網av一葉情貼影色網18 禁一葉情貼影入口女生自衛影片免費聊天女同志聊天室成人聊天室做愛影片網交聊天室性愛姿勢免費av影片觀看拓峰交友plus論壇hbo論壇一夜情視訊聊天室五分鐘護半身視訊美女激情網愛聊天室臺灣情色網

8:46 AM  
Blogger NicolaSigel0508 said...

要持續更新下去喲!!祝你心情愉快........................................

12:36 AM  
Blogger 明宏 said...

偉大的致富萬能之鑰,正是幫你充分掌握自己心志所必須的自律自制..................................................

9:48 AM  
Blogger 長卉LisetteC said...

18禁,聊天,免費影片,美女短片,0401,免費聊天,免費視訊,0204,78論壇,亞洲影城,視訊聊天,免費影片,聊天室,ut,成人,視訊,都都,視訊,打飛機專用網,小高聊天室,視訊,免費影片,a片免費,a片,18,免費線上視訊,日本a電影,影音視訊聊天室,貼圖區,av,383,77p2p,85cc,無碼,av影片,av專賣店,a片線上看,a圖,免費線上影片,微風成人

8:32 PM  
Blogger 吉水 said...

Nice post ~ 3Q..............................................................

10:43 AM  
Blogger feli5289xv_ferrari said...

快樂是你與生俱來的權力,它不應該取決於你完成什麼。 ..................................................

11:45 AM  
Blogger M12aeganT_Moe12 said...

好問才能博學。.............................................

11:10 PM  
Blogger 韋于倫成 said...

一個人思慮太多,就會失去做人的樂趣 ..................................................

7:03 AM  
Blogger 俊翔 said...

唯有用熱情、用智慧去觀察事物,這事物才會把他的秘密,洩漏給我們......................................................

6:34 AM  
Blogger burtong said...

想要推動天下,先要發動自己。 ....................................................

10:57 PM  
Blogger 聖妃 said...

你不能決定生命的長度,但你可以控制它的寬度................................................................

3:16 PM  
Blogger 冠慧 said...

人有兩眼一舌,是為了觀察倍於說話的緣故。................................................................

8:31 AM  
Blogger 江婷 said...

在莫非定律中有項笨蛋定律:「一個組織中的笨蛋,恆大於等於三分之二。」.................................................................

6:57 AM  
Blogger 江婷 said...

一棵樹除非在春天開了花,否則難望在秋天結果。.................................................................

12:27 PM  
Blogger 韋志韋志 said...

成熟,就是有能力適應生活中的模糊。.................................................................

6:11 AM  
Blogger 建霖建霖 said...

安一估~你也安一估哦~............................................................

9:09 AM  
Blogger 陳登陽 said...

Nothing comes from nothing.............................................................

10:26 PM  
Blogger 健豪健豪 said...

快樂,是享受工作過程的結果............................................................

10:18 PM  
Blogger 佳皓佳皓 said...

單純喜歡你的部落格 留個言跟您問聲好~~............................................................

2:21 AM  
Blogger 楊儀卉 said...

單純喜歡你的部落格 留個言跟您問聲好~~...............................................................

3:13 PM  
Blogger 廖珮秋廖珮秋 said...

far from eye, far from heart...................................................

2:01 AM  
Blogger 淑娟淑娟淑娟 said...

你的部落格不錯哦,支持!!!!@@ ............................................................

12:45 PM  
Blogger 洪瑋婷洪瑋婷 said...

嗨~~留個言跟您問好!!謝謝您的分享..................................................................

4:48 AM  
Blogger 盈廖生家秀蔡 said...

風平浪靜時,人人都可以當舵手.................................................................

2:16 AM  
Blogger 逸蔡凡逸蔡凡逸蔡凡 said...

男女互悅,未必廝守終生,相愛就是美的。.................................................................

2:12 AM  
Blogger 建依萍彰 said...

好的開始並不代表會成功,壞的開始並不代表是失敗..................................................

5:58 AM  
Blogger 建邱勳 said...

卡爾.桑得柏:「除非先有夢,否則一切皆不成。」共勉!............................................................

3:57 AM  
Blogger 王辛江淑萍康 said...

人類的聰明,並非以經驗為依歸,而是以接受經驗的行程為依歸。..................................................

11:38 PM  
Blogger 偉曹琬 said...

成功的秘訣在於:當機會來臨時,你已準備妥當............................................................

3:41 PM  
Blogger 王辛江淑萍康 said...

It is never too late to learn.......................................................................

1:20 AM  
Blogger 幸平平平平杰 said...

所有的資產,在不被諒解時,都成了負債............................. ....................................

1:34 AM  
Blogger 48684 said...

希望能常常看到你的更新............................................................

5:12 AM  
Blogger 佳張張張張燕張張張張張 said...

打聲招呼,祝你一切平安!............................................................

1:40 PM  
Blogger 苗承凡 said...

很精彩的部落格 期待你的繼續加油..................................................

3:05 AM  
Blogger office said...

The Tax Return Crack-Up<4>
Realizing he might have dug himself in there,Microsoft Office 2010the general emphasized that Office 2010he had spent some time as a junior Office 2007officer working "very closely Microsoft Officewith the Israeli air force" and that heMicrosoft Office 2007had found that "more cosmopolitan,Office 2007 key liberal version of the Israeli population" Office 2007 downloadto be just chock full Office 2007 Professionalof that sort of "goodwill" necessary Windows 7to give a bunch of land back Microsoft outlook 2010to the Palestinians.

4:02 AM  
Blogger escort said...

Awesome blog Adam!! deneme linki I saw you all in Buffalo and the show was incredible, turkey hotels the best I've ever seen and I can't wait to see the show again in Rochester! It's so great to hear you're having a good time. escort bayanlar met you in Cleveland and you seemed so escort istanbul If things go my way, I'll be able to catch up with chat siteleri toptan mallar satış sitesi toptan mallar deneme ist escorts

derteg deneme istanbul escort gtyuty

9:22 PM  

Post a Comment

<< Home