[tor-bugs] #5131 [Obfsproxy]: auditing obfsproxy

[Tor Bug Tracker & Wiki]

#5131: auditing obfsproxy
-------------------------+--------------------------------------------------
 Reporter:  ioerror      |          Owner:  asn
     Type:  enhancement  |         Status:  new
 Priority:  normal       |      Milestone:     
Component:  Obfsproxy    |        Version:     
 Keywords:  security     |         Parent:     
   Points:               |   Actualpoints:     
-------------------------+--------------------------------------------------
 Hi,

 At the request of asn, I started to audit obfsproxy - I started and have
 been making some commits as I go along:

 Here's my gcc/ld hardening one trick pony:
 https://gitweb.torproject.org/user/ioerror/obfsproxy.git/commit/b3367507b465703762c0c6dd9816f9eef133c350

 A basic start at an apparmor profile:
 https://gitweb.torproject.org/user/ioerror/obfsproxy.git/commit/d1599cf358bb2471014b1aaaed2b10fe22516bc2

 Spec notes:
 https://gitweb.torproject.org/user/ioerror/obfsproxy.git/commit/4d0405a6269f3abf0bb862e9e0a7587cbe5fbeef

 Threat model notes:
 https://gitweb.torproject.org/user/ioerror/obfsproxy.git/commit/053b267d96053624daa326d3ad6171dd3763b498

 Here's the full branch:
 https://gitweb.torproject.org/user/ioerror/obfsproxy.git/shortlog/refs/heads/compile_hardening

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5131>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online