Je suis tombe sur sysmask, un outil qui assurerait une certaine securite
theorique (et donc absolue) a un systeme *nix ..
http://wims.unice.fr/sysmask/doc/
Theoriquement, c'est jouable .. mais il faut pouvoir prouver le systeme en entier .. et les programmes qui tournent dessus.
Avec sysmask, ils proposent un outil qui permet de ramener la securite du systeme a ceci
A fully deployed sysmask can protect the system against any vulnerability
except those in a small portion of the kernel, which is historically very
solid, plus those in the sysmask package itself.
|
Il ne resterait plus qu'a faire la preuve theorique du kernel :
The objective is to achieve theoretical (that is, absolute) security against
certain well-identified risks: exploiting bugs in a running system to gain
unauthorized access rights to the system. Examples include infiltration
through a vulnerable network daemon, local user root privilege elevation via
a kernel vulnerability, or installation of a virus in user account through a
vulnerable browser or mail agent.
While this goal is not yet reached, the actual version can successfully
reduce the security-sensitive codes of a system to a very small portion of
the kernel. So small that hopefully one day a proof checker can be run on it
and prove its solidity.
|
Ca, c'est la theorie ..
En pratique, ils affirment que
sysmask, a Linux security package that can prevent arbitrary malicious codes from causing permanent damage. It protects the system against daemon exploits and user accounts against viruses and worms, whether known or unknown, without requiring the recompilation of existing software.
|
Ils vous defient meme de faire tomber un fichier protege dans leur bac a sable ! Vous avez droit au C, a sh et a Perl !!
C'est par ici ->
Go! Go! Go!
Statistiques des attaques aujourd'hui 2005/04/27
Sysmask security challenge
----- Help [Back] -----
History of successful attempts
This challenge has executed 2604 shell scripts, 119 perl scripts and 123 c codes since 14 April 2005.
No successful attempt has ever been registered up to now, by any of the methods.
Server crashes due to the execution of a code: 0.
Server break-ins due to the execution of a code: 0.
Objects left after the executions that have to be cleaned manually: 0.
|
Je vous laisse seuls juges.
