diff --git a/README.md b/README.md index 2fa7092..f933980 100644 --- a/README.md +++ b/README.md @@ -330,8 +330,6 @@ systems. meson test -C build --suite basic ``` -TODO CI with Dockerfile on Github - ### Fuzzing Along with the project source code, a fuzzing framework based on `libfuzzer` is @@ -421,6 +419,8 @@ keys. * AA927AFD50AF7C6810E69FE8274F2C605359E31B * BE2DED372287BC4EB2213E13A0C743848A638955 * 0F3476E4B2404F95EC41600683D5810F7911B020 + * 4E82C72C6B3E58A7BC4FF8554909F84CA83BB867 + * 5AEB1A2EB0D13F67E306AC59DC0CC81BE006FD85 Should we at any point retire a key, we will only replace it with keys signed by at least one of the above collection. diff --git a/SECURITY.md b/SECURITY.md index bd7c388..2f33197 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -42,6 +42,7 @@ in `keys/` and sign your message with your own key. * B15B92642760E11FE002DE168708D42451A94AB5 * F8DD9F8DD12B85A28F5827C4678E34D2E753AA3C * 3ACEA46CCECD59E4C8222F791CBEB493681E8693 +* 0A268C188D7949FEB39FD1462F2AD980247E4918 Note that our keys are signed by cagebreak signing keys. @@ -62,7 +63,8 @@ screens, ipc and potentially other documented local channels. ### STRIDE Threat List This is not a thorough analysis, just an overview of the ways in which cagebreak -has (no) attack surface. +has (no) attack surface. Please reference the man pages for details but especially +the -e and --bs options. #### Spoofing diff --git a/man/cagebreak-config.5.md b/man/cagebreak-config.5.md index 4d0746b..1c65b78 100644 --- a/man/cagebreak-config.5.md +++ b/man/cagebreak-config.5.md @@ -420,6 +420,7 @@ GPG Fingerprints: - B15B92642760E11FE002DE168708D42451A94AB5 - F8DD9F8DD12B85A28F5827C4678E34D2E753AA3C - 3ACEA46CCECD59E4C8222F791CBEB493681E8693 +- 0A268C188D7949FEB39FD1462F2AD980247E4918 # LICENSE diff --git a/man/cagebreak-socket.7.md b/man/cagebreak-socket.7.md index 6d5bc21..b8e8d9c 100644 --- a/man/cagebreak-socket.7.md +++ b/man/cagebreak-socket.7.md @@ -582,6 +582,7 @@ GPG Fingerprints: - B15B92642760E11FE002DE168708D42451A94AB5 - F8DD9F8DD12B85A28F5827C4678E34D2E753AA3C - 3ACEA46CCECD59E4C8222F791CBEB493681E8693 +- 0A268C188D7949FEB39FD1462F2AD980247E4918 # LICENSE diff --git a/man/cagebreak.1.md b/man/cagebreak.1.md index a8ef121..b3fd209 100644 --- a/man/cagebreak.1.md +++ b/man/cagebreak.1.md @@ -90,6 +90,7 @@ GPG Fingerprints: - B15B92642760E11FE002DE168708D42451A94AB5 - F8DD9F8DD12B85A28F5827C4678E34D2E753AA3C - 3ACEA46CCECD59E4C8222F791CBEB493681E8693 +- 0A268C188D7949FEB39FD1462F2AD980247E4918 # LICENSE