Commit 192989b0 authored by Kees Cook's avatar Kees Cook Committed by Valerie Aurora
Browse files

Add more attack surface examples

parent 534b3c5e

EN-304-626.md

+3 −1
Original line number Diff line number Diff line
@@ -1299,8 +1299,10 @@ If the product requires initial configuration before use, the manufacturer shall 
* Test: On the product before any configuration is carried out, completely enumerate all reachable privilege boundaries via:

  * network ports

  * system calls

  * handle based interfaces (e.g. /dev, /sys, /proc)

  * file based interfaces (e.g. /dev, /sys, /proc, ioctl)

  * handle based interfaces (e.g. IPC, D-Bus)

  * shared memory regions (e.g. GPU, MMIO)

  * authentication systems (e.g. sudo, polkit)

  * FIXME more

* Result: All interfaces are found in the documentation produced for MI-DOEI

* Output: List of interfaces found by tests