From 0bdfdf08fa613385b2a98ce8e29eb3f624fda8c4 Mon Sep 17 00:00:00 2001 From: tjt_lazarus_1997 Date: Fri, 29 Jan 2010 19:50:56 -0800 Subject: [PATCH] Some basic security related ideas for GSoC 2010 --- docs/developer/gsoc2010/index.mdwn | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/docs/developer/gsoc2010/index.mdwn b/docs/developer/gsoc2010/index.mdwn index cda5be34..009e6c09 100644 --- a/docs/developer/gsoc2010/index.mdwn +++ b/docs/developer/gsoc2010/index.mdwn @@ -28,5 +28,12 @@ Have a look at our SoC pages from [[2008|docs/developer/GoogleSoC2008/]] and [[2 * Reproduce the whole manual, check what applies to DFBSD and what dont, rewrite the chapters so user manual is 100% DFBSD compliant. * Add more info about hammer and other dfbsd only stuff, how to use it and how to configure it. (user manual). +5. Security/Hardening improvements +* Encrypted swap/filesystems (From NetBSD or OpenBSD?) +* Extended toolchain hardening +* NX/XD support in kernel (at least for 64 bit kernels, DF doesn’t support PAE IIRC) +* More use of randomization (for example in PIDs) +* Port OpenBSD’s most recent malloc implementation as an option +* Use blf instead of md5 for passwords etc. (already possible, but not default) (please add) -- 2.41.0