Commits · 192989b0f27d99e9c8d26051102ca609a8691fd5 · STAN4CRA / EN 304 626 Operating Systems · GitLab

Sep 30, 2025
- Add more attack surface examples · 192989b0
  Kees Cook authored Sep 29, 2025
  
  192989b0
- Add more classes of microarchitectural side channels · 534b3c5e
  Kees Cook authored Sep 29, 2025
  
  534b3c5e
- Define "Principle of Least Privilege" · 2c2766a3
  Kees Cook authored Sep 29, 2025
  
  2c2766a3
- Expand Threat Actor description · 1a0213bb
  Kees Cook authored Sep 29, 2025
  1a0213bb
- replace "we don't accept pull requests" with "we don't accept merge requests" · 80284ac1
  Jordan Maris authored Sep 30, 2025
  
  80284ac1
- Update TR-TEST and map TR-MINI to CRA · faf6d23f
  Valerie Aurora (Bow Shock) authored Sep 30, 2025
  
  faf6d23f
Sep 29, 2025
- Rewrite risk factors in terms of foreseeable use · d8642e06
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  d8642e06
- Add support period risk factor · 350cdfa7
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  350cdfa7
- Fix up subject of shall statements, clarify spec execution req · 9c6d339f
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  9c6d339f
- Val's threat analysis notes · 55290337
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  55290337
- Some corrections to memory access control section · fa04cc2d
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  fa04cc2d
- Make risk transfer only allowed if the TR says so · 79e2ecad
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  79e2ecad
- De-number risk factors while they are changing a lot · 41331d96
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  41331d96
- Replace "the internet" with "a public network" · 2beda2ab
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  2beda2ab
Sep 28, 2025
- Rewrite risk factors without "shall", add/refine risk factors · b3cb0641
  Valerie Aurora (Bow Shock) authored Sep 28, 2025
  
  b3cb0641
- Split "justify yourself" TR into documentaiton and scanning · 50c5f1ec
  Valerie Aurora (Bow Shock) authored Sep 28, 2025
  
  50c5f1ec
- Remove redundant parts of mitigation descriptions · e69b9e04
  Valerie Aurora (Bow Shock) authored Sep 28, 2025
  
  e69b9e04
- Update general description for mitigations · d6a8655f
  Valerie Aurora (Bow Shock) authored Sep 28, 2025
  
  d6a8655f
- Add/update some definitions · 06ab08c5
  Valerie Aurora (Bow Shock) authored Sep 28, 2025
  
  06ab08c5
- Make inheritance of memory isolation mitigations explicit · 592e2ded
  Valerie Aurora (Bow Shock) authored Sep 28, 2025
  
  592e2ded
Sep 27, 2025
- Map memory isolation requirement to CRA requirements · adffba6c
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  adffba6c
- Map memory isolation mitigations to security profiles · 375f8947
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  375f8947
- Fill out assumptions. · 90468e7d
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  90468e7d
- Fill out some threats · 4ffef1e0
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  4ffef1e0
- Add option to delete user data instead of resetting device to NUSR · a58b056a
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  a58b056a
- Rewrite memory isolation requirements and add speculative execution requirement · baf39c19
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  baf39c19
- Improve memory isolation technical requirement · f28cecea
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  f28cecea
- Remove very limited NIAP threats, BSI covers them and more · 00c67876
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  00c67876
- Fix short name of software access risk factor · 3585ced1
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  3585ced1
- Update TR description, threat description -> example threat · 418c0fc3
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  418c0fc3
- Add test/doc requirements, rearrange one requirement · fac30faf
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  fac30faf
- Add note about availability of risk transfer · 1650aca8
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  1650aca8
- Remove hostile hardware/admin, add admin quality · 0a7722ce
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  0a7722ce
- Add web browsing risk factor · a3f14242
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  a3f14242
- Small reword/formatting/notes to use cases and risk factors · a19bfe1b
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  a19bfe1b
Sep 26, 2025
- Update file EN-304-626.md · 79a7f2a4
  Aeva Black authored Sep 25, 2025
  
  79a7f2a4
- MI-JUST: Reword and consolidate · 5c5df9b9
  Kees Cook authored Sep 24, 2025
  5c5df9b9
- MI-KCFI: Consolidate memory protection sections · e7fc62c6
  Kees Cook authored Sep 24, 2025
  e7fc62c6
- MI-USR*: Add tests for DAC and "seat count" · c7ae5497
  Kees Cook authored Sep 24, 2025
  c7ae5497
- RF: Add rough "memory safety" risk factor · 15e4404a
  Kees Cook authored Sep 24, 2025
  15e4404a