Wishlist - Revision history

WhyNotHugo: /* Removing SUIDs/SGIDs */ mentioned sandboxes/containers

2025-08-24T13:14:43Z

Removing SUIDs/SGIDs: mentioned sandboxes/containers

← Older revision		Revision as of 13:14, 24 August 2025
Line 33:		Line 33:
	== Removing SUIDs/SGIDs ==		== Removing SUIDs/SGIDs ==
	It would be nice to see the elimination of these file permissions from Alpine. The reason for this is because throughout the years SUIDs/SGIDs have repeatedly been a source of exploits (esp. privilege escelation) for UNIX derivatives. It may be unfeasible or not unwise to completely ban these file permissions for all packages of Alpine but removing these permissions from Alpine base and X server has been proven to be doable and would provide safer Alpine systems out of the box.		It would be nice to see the elimination of these file permissions from Alpine. The reason for this is because throughout the years SUIDs/SGIDs have repeatedly been a source of exploits (esp. privilege escelation) for UNIX derivatives. It may be unfeasible or not unwise to completely ban these file permissions for all packages of Alpine but removing these permissions from Alpine base and X server has been proven to be doable and would provide safer Alpine systems out of the box.

			Additionally, SUID binaries are problematic inside sandboxes (including docker containers). Eliminating them would improve operability inside containers.

	= Packaging =		= Packaging =

Sertonix: use https

2023-08-25T21:29:54Z

use https

← Older revision		Revision as of 21:29, 25 August 2023
Line 28:		Line 28:

	=== tcb resources ===		=== tcb resources ===
	* [~~http~~://www.openwall.com/tcb/ tcb - the alternative to /etc/shadow]		* [https://www.openwall.com/tcb/ tcb - the alternative to /etc/shadow]
	* [~~http~~://www.openwall.com/presentations/Owl/mgp00020.html tcb - slides]		* [https://www.openwall.com/presentations/Owl/mgp00020.html tcb - slides]

	== Removing SUIDs/SGIDs ==		== Removing SUIDs/SGIDs ==
Line 41:		Line 41:
	* [https://github.com/devrandom/gitian-builder gitian-builder]		* [https://github.com/devrandom/gitian-builder gitian-builder]
	* [https://gist.github.com/devrandom/806265 libcoin gitian build code]		* [https://gist.github.com/devrandom/806265 libcoin gitian build code]
	* [~~http~~://media.ccc.de/browse/congress/2014/31c3_-_6240_-_en_-_saal_g_-_201412271400_-_reproducible_builds_-_mike_perry_-_seth_schoen_-_hans_steiner.html 31C3 - Reproducible Builds]		* [https://media.ccc.de/browse/congress/2014/31c3_-_6240_-_en_-_saal_g_-_201412271400_-_reproducible_builds_-_mike_perry_-_seth_schoen_-_hans_steiner.html 31C3 - Reproducible Builds]

	== Nix ==		== Nix ==
Line 55:		Line 55:

	* [https://qubes-os.org/ QubesOS]		* [https://qubes-os.org/ QubesOS]
	* [~~http~~://www.opendaylight.org/ OpenDaylight]		* [https://www.opendaylight.org/ OpenDaylight]
	* [~~http~~://www.openstack.org/marketplace/distros/ OpenStack]		* [https://www.openstack.org/marketplace/distros/ OpenStack]
	* [https://coreos.com/ CoreOS]		* [https://coreos.com/ CoreOS]
	* [https://tails.boum.org/ Tails]		* [https://tails.boum.org/ Tails]
	* [~~http~~://dee.su/liberte Liberte]		* [https://dee.su/liberte Liberte]
	* [https://www.kali.org/ Kali]		* [https://www.kali.org/ Kali]
	* [~~http~~://www.pentoo.ch/ Pentoo]		* [https://www.pentoo.ch/ Pentoo]

	= Automation =		= Automation =

Zcrayfish: /* Nix */ Rescued a dead link.

2023-08-25T15:21:35Z

Nix: Rescued a dead link.

← Older revision		Revision as of 15:21, 25 August 2023
Line 45:		Line 45:
	== Nix ==		== Nix ==

	* [http://nixos.org/docs/papers.html NixOS Papers]		* [https://web.archive.org/web/20170705180623/http://nixos.org/docs/papers.html NixOS Papers]
	* [https://nixos.org/nix/ Nix Package Manger]		* [https://nixos.org/nix/ Nix Package Manger]
	* [https://nixos.org/ NixOS - Homepage]		* [https://nixos.org/ NixOS - Homepage]



	= Builds =		= Builds =

Innsill: + category:Development

2019-09-13T14:57:10Z

+ category:Development

← Older revision		Revision as of 14:57, 13 September 2019
Line 1:		Line 1:
	{{Draft}}		{{Draft}}
			{{TOC right}}

	{{Warning\|This page is unofficial at the moment.}}		{{Warning\|This page is unofficial at the moment.}}
Line 77:		Line 78:

	== Publicity ==		== Publicity ==


			[[category:Development]]

Leo at 01:14, 28 April 2019

2019-04-28T01:14:26Z

← Older revision		Revision as of 01:14, 28 April 2019
Line 22:		Line 22:



	~~== grsecurity policy database ==~~
	I think providing a [https://grsecurity.net/ grsecurity] policy database for users and administrators would greatly increase adoption and proper use of grsecurity. A starting point for this project would be to provide the lowest common denominator policies, that has been tested to work, for a given package, daemon, or service. I think this would drastically reduce the barior to entry for users increase the security of the system. Hopefully this database provides building blocks need to quickly learn, modify, and validate grsecurity policies that match their intended policies for their system(s).

	== tcb Logins ==		== tcb Logins ==

Leo: Remove obsolete entry about grsecurity tooling

2019-04-28T01:14:07Z

Remove obsolete entry about grsecurity tooling

← Older revision		Revision as of 01:14, 28 April 2019
Line 18:		Line 18:

	= Hardening =		= Hardening =

	~~== gradm ==~~

	~~Have gradm utility work out of the box with Alpine Linux.~~

	== capabilities ==		== capabilities ==

Systmkor: gradm - needs to work

2015-02-04T00:51:57Z

gradm - needs to work

← Older revision		Revision as of 00:51, 4 February 2015
Line 18:		Line 18:

	= Hardening =		= Hardening =

			== gradm ==

			Have gradm utility work out of the box with Alpine Linux.

	== capabilities ==		== capabilities ==

Systmkor: /* Packaging */ cleaned up links

2015-01-31T08:37:58Z

Packaging: cleaned up links

← Older revision		Revision as of 08:37, 31 January 2015
Line 39:		Line 39:

	== gitian ==		== gitian ==
	[https://gitian.org/]
	[https://github.com/devrandom/gitian-builder]		* [https://gitian.org/ gitian]
	[https://gist.github.com/devrandom/806265]		* [https://github.com/devrandom/gitian-builder gitian-builder]
	[http://media.ccc.de/browse/congress/2014/31c3_-_6240_-_en_-_saal_g_-_201412271400_-_reproducible_builds_-_mike_perry_-_seth_schoen_-_hans_steiner.html 31C3 - Reproducible Builds]		* [https://gist.github.com/devrandom/806265 libcoin gitian build code]
			* [http://media.ccc.de/browse/congress/2014/31c3_-_6240_-_en_-_saal_g_-_201412271400_-_reproducible_builds_-_mike_perry_-_seth_schoen_-_hans_steiner.html 31C3 - Reproducible Builds]

	== Nix ==		== Nix ==
	[http://nixos.org/docs/papers.html]
	[https://nixos.org/nix/]		* [http://nixos.org/docs/papers.html NixOS Papers]
	[https://nixos.org/]		* [https://nixos.org/nix/ Nix Package Manger]
			* [https://nixos.org/ NixOS - Homepage]

Systmkor: /* Packaging */ gitian & Nix - Initial reference to these

2015-01-31T08:26:02Z

Packaging: gitian & Nix - Initial reference to these

← Older revision		Revision as of 08:26, 31 January 2015
Line 37:		Line 37:

	= Packaging =		= Packaging =

			== gitian ==
			[https://gitian.org/]
			[https://github.com/devrandom/gitian-builder]
			[https://gist.github.com/devrandom/806265]
			[http://media.ccc.de/browse/congress/2014/31c3_-_6240_-_en_-_saal_g_-_201412271400_-_reproducible_builds_-_mike_perry_-_seth_schoen_-_hans_steiner.html 31C3 - Reproducible Builds]

			== Nix ==
			[http://nixos.org/docs/papers.html]
			[https://nixos.org/nix/]
			[https://nixos.org/]



	= Builds =		= Builds =

Systmkor: /* Builds */ Distrso - Able to build equivalents on top of Alpine

2015-01-31T07:45:01Z

Builds: Distrso - Able to build equivalents on top of Alpine

@@ Line 18: / Line 18: @@
 = Hardening =
 == grsecurity policy database ==
@@ Line 35: / Line 39: @@
 = Builds =
 = Automation =