Some basic security related ideas for GSoC 2010

diff --git a/docs/developer/gsoc2010/index.mdwn b/docs/developer/gsoc2010/index.mdwn
index cda5be3..009e6c0 100644 (file)
--- a/docs/developer/gsoc2010/index.mdwn
+++ b/docs/developer/gsoc2010/index.mdwn
@@ -28,5 +28,12 @@ Have a look at our SoC pages from [[2008|docs/developer/GoogleSoC2008/]] and [[2
 * Reproduce the whole manual, check what applies to DFBSD and what dont, rewrite the chapters so user manual is 100% DFBSD compliant.
 * Add more info about hammer and other dfbsd only stuff, how to use it and how to configure it. (user manual).
 
+5. Security/Hardening improvements
+* Encrypted swap/filesystems (From NetBSD or OpenBSD?)
+* Extended toolchain hardening
+* NX/XD support in kernel (at least for 64 bit kernels, DF doesn’t support PAE IIRC)
+* More use of randomization (for example in PIDs)
+* Port OpenBSD’s most recent malloc implementation as an option 
+* Use blf instead of md5 for passwords etc. (already possible, but not default)
 
 (please add)