UNIX Security

My Stuff

• Definition of Secure Software
• Designing Secure Desktop Operating System (rev. 3)
• Secure, Efficient and Easy C programming mini-HOWTO
• Most common security flaws with C programs
• Data Stack can be used as efficient replacement (where it makes sense) for dynamic memory allocations.
• Some security advisories
  • Possibly interesting statistics: It usually takes me from few minutes to less than half an hour to find the first security hole from software, if I find any..
• Some security hardening patches

Others' Stuff

• Secure Programming HOWTO
• setuid() demystified
• chroot()ing into user-modifyable dir is INSECURE
• Exploiting free() - a bit outdated for glibc 2.3 but basics are still the same
• Secure Interaction Design

Software

• grsecurity Linux kernel patch. Always use it in your Linux servers (the PaX part, although nowadays it has some alternatives too).
• systrace allows sandboxing applications. Supports multiple UNIX kernels.
• Coyotos Plans to build a formally verified kernel using a self-designed BitC language.