Comments (2)
thestinger
commented on June 23, 2024
I don't think each service needing to provide a MAC policy is a sensible way to approach MAC. The distribution should be providing generic isolation for services. This would also be too distribution-specific for us to implement it.
We run the overall service in a dedicated virtual machine so there are very limited benefits to providing better containment. The attestation server's database is the only valuable data that's available and it inherently needs to have full read / write access to it.
from attestationserver.
thestinger
commented on June 23, 2024
SELinux policy is very distribution-specific, so it would be significantly harder to provide anything useful than alternatives too. It's the best way to do this kind of thing, but the distribution really has to deal with it.
from attestationserver.
Related Issues (20)
- use hash-source in CSP for script-src/style-src once Safari and Firefox support it for external files like Chromium (CSP v3)
- store certificate chain compressed in a single field
- New databases are not created HOT 1
- Starting server fails - DB[1] exec() near "STRICT": syntax error HOT 2
- Error: malformed database schema (Configuration) - near "STRICT": syntax error HOT 2
- Scanned invalid account QR code HOT 5
- noscript message not shown HOT 2
- Show pretty page for when nginx shows a 502 or a 405 HOT 2
- add a hard limit on sending alerts for a given problem HOT 1
- add support for the new attestation root certificate HOT 1
- add a database table with blacklisted email patterns to replace the hard-wired array in the source code
- Tutorial should explain how to use results HOT 2
- Remote Attestation: 48 hour delay verification HOT 6
- set up per-IP API rate limits via nginx configuration HOT 1
- sponge not in package.json HOT 1
- Investigate AppArmor confinement HOT 1
- Investigate further systemd confinement HOT 2
- How to know if a device is compromised? HOT 1
- When "Verified Boot Hash" changed? HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from attestationserver.