This is an old revision of the document!
Robert Watson's Wiki Page
Robert Watson is a member of the FreeBSD Core Team, as well as a variety of other teams (Release Engineering, Security, etc), as well as founder of the TrustedBSD Project, and project lead on the SMP Network Performance project.
Personal TODO
- Design and implement a privilege API and fine-grained privilege model for the kernel, possibly based on past work on POSIX.1e for FreeBSD as part of TrustedBSD, the Solaris privilege model, and the Linux POSIX.1e-derived privilege model.
- Contribute to testing, evaluating, and productionizing the results of the VImage project for virtualized network stacks (and other system services).
- Complete OpenBSM 1.1 and merge into the base FreeBSD tree.
- Work on a fine-grained audit pipe subscription model so applications can request more specific events.
- Complete address list locking for the network stack. Evaluate rmlocks and other higher-performance synchronization models for frequently read and infrequently modified data structures.
- Implement breaking out inpcbinfo and related structures into hashed structures allowing reduced contention for UDP and TCP global locks as well as improved CPU locality.
- Continue migrating the TrustedBSD MAC Framework towards more flexibility in terms of label management and avoiding leaking on labeled policy unload, with the hopes of reducing overhead on MAC to the point where it can be put in GENERIC.
- Enable security audit by default with a login/logout selection profile by default.