Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
| zhouyizhou [2008/08/14 08:34] – ZhouyiZHOU | zhouyizhou [2022/09/15 02:19] (current) – link to MandatoryAccessControl KubilayKocak | ||
|---|---|---|---|
| Line 3: | Line 3: | ||
| ... | ... | ||
| - | |||
| - | The invoice of prepayed hotel fee(in Chinese) | ||
| - | {{ZhouyiZHOU/ | ||
| - | The invoice of prepayed hotel fee(English translation) | ||
| - | {{ZhouyiZHOU/ | ||
| - | Electronic Ticket(in Chinese) | ||
| - | {{ZhouyiZHOU/ | ||
| - | Electronic Ticket(English translation) | ||
| - | {{ZhouyiZHOU/ | ||
| High everyone, I am a new comer. My job in SOC 2007 is writing a testsuite for Security Subsystem for %%FreeBSD%%/ | High everyone, I am a new comer. My job in SOC 2007 is writing a testsuite for Security Subsystem for %%FreeBSD%%/ | ||
| Line 19: | Line 10: | ||
| Work performed: | Work performed: | ||
| - | - Use [[http:// | + | - Use [[http:// |
| - Constructed a pair of pseudo ethernet drivers used for testing network related hooks. To avoid the packet go through the lo interface, the IP address in the packet is twisted in the driver. | - Constructed a pair of pseudo ethernet drivers used for testing network related hooks. To avoid the packet go through the lo interface, the IP address in the packet is twisted in the driver. | ||
| - Constructed a framework for logging Mandatory Access Control hooks which is got called during a period of time. | - Constructed a framework for logging Mandatory Access Control hooks which is got called during a period of time. | ||
| * In kernel, every non-null label is got externalized into human readable string and recorded in a tail queue together with the name of hook that got called and possible flags or modes (etc. VREAD/ | * In kernel, every non-null label is got externalized into human readable string and recorded in a tail queue together with the name of hook that got called and possible flags or modes (etc. VREAD/ | ||
| * In userland, a bison based parsing tool is used to parse the logged file and reconstruct the record chain which will be compared with testsuite supplied configuration file to examine if expected hooks is got called and the label/ | * In userland, a bison based parsing tool is used to parse the logged file and reconstruct the record chain which will be compared with testsuite supplied configuration file to examine if expected hooks is got called and the label/ | ||
| - | - The test cases about mandatory access control hooks for fifo, link, mdconfig, netinet, open, pipe, rename, rmdir, signal, symlink, sysvshm and truncate are written. Two security vulnerabilities are found during the test case writing. | + | - The test cases about mandatory access control hooks for fifo, link, mdconfig, netinet, open, pipe, rename, rmdir, signal, symlink, sysvshm and truncate are generated. Two security vulnerabilities are found during the test case writing. |
| + | - Use constraint resolver STP[people.csail.mit.edu/ | ||
| The source code of project can be found on [[http:// | The source code of project can be found on [[http:// | ||
| Line 30: | Line 23: | ||
| [[http:// | [[http:// | ||
| - | Show my results | + | Meet with PCBSD guys in %%AsiaBSDCon%% 2008 (trip sponsored by google): {{zhouyizhou/ |
| - | + | ||
| - | Meet with PCBSD guys: {{zhouyizhou/ | + | |
| - | + | ||
| - | The patch for in_cksum of %%FreeBSD%% {{zhouyizhou/ | + | |
| - | + | ||
| - | {{zhouyizhou/ | + | |
| - | + | ||
| - | A park in Wuxi where we implement %%TrustedBSD%% for government website {{zhouyizhou/ | + | |
| - | + | ||
| - | {{ZhouyiZHOU/ | + | |
| ---- | ---- | ||
| - | {{tag> | + | * CategoryHomepage |
| - | + | ||
| - | {{ZhouyiZHOU/ | + | |
| - | {{ZhouyiZHOU/ | + | |
| - | {{ZhouyiZHOU/ | + | |
| - | {{ZhouyiZHOU/ | + | |
| - | {{ZhouyiZHOU/ | + | |
| - | {{ZhouyiZHOU/ | + | |
| - | {{ZhouyiZHOU/ | + | |
| - | {{ZhouyiZHOU/ | + | |