foster/deno
0
0
Fork 0
mirror of https://github.com/denoland/deno.git synced 2025-03-03 17:34:47 -05:00
Code Issues Packages 1 Wiki Activity

Adjust roadmap security text. (#320)

Browse source
This commit is contained in:
Ryan Dahl 2018-07-03 21:18:42 +02:00 • committed by GitHub
parent 6f7ca760b8
commit 6c9598d358
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 15 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
Roadmap.md
View file

@ -44,17 +44,16 @@ https://github.com/ry/deno/master/testing.js
* Threat model: * Threat model:
* Modifiying/deleting local files * Modifiying/deleting local files
* Leaking private information * Leaking private information
* By default: * Disallowed default:
* No network access * Network access
* No local write access * Local write access
* No non-js extensions * Non-JS extensions
* No subprocesses * Subprocesses
* No env access * Env access
* Allowed default:
* Local read access. * Local read access.
* argv, stdout, stderr, stdin access always allowed. * argv, stdout, stderr, stdin access always allowed.
* Optional: temp dir by default. But what if they create symlinks there? * Maybe: temp dir write access. (But what if they create symlinks there?)
* (We could relax by saying, you can get network access first and read access
after that.)
* The user gets prompted when the software tries to do something it doesn't have * The user gets prompted when the software tries to do something it doesn't have
the privilege for. the privilege for.
* Have an option to get a stack trace when access is requested. * Have an option to get a stack trace when access is requested.
@ -62,10 +61,13 @@ https://github.com/ry/deno/master/testing.js
to monkey patching techniques. Access should be granted per program (js to monkey patching techniques. Access should be granted per program (js
context). context).
Program requests write access to "~/.ssh/id_rsa". Grant? [yNs]? Example security prompts. Options are: YES, NO, PRINT STACK
http://gist.github.com/asdfasd.js requests network access to "www.facebook.com". Grant? [yNs]? ```
Program requests access to environment variables. Grant? [yNs]? Program requests write access to "~/.ssh/id_rsa". Grant? [yNs]
Program requests to spawn `rm -rf /`. Cool? http://gist.github.com/asdfasd.js requests network access to "www.facebook.com". Grant? [yNs]
Program requests access to environment variables. Grant? [yNs]
Program requests to spawn `rm -rf /`. Grant? [yNs]
```
* cli flags to grant access ahead of time --allow-all --allow-write --allow-net * cli flags to grant access ahead of time --allow-all --allow-write --allow-net
--allow-env --allow-exec --allow-env --allow-exec