matu3ba / win32k-mitigation

Test win32k.sys system call filtering (kernel32 + ntdll only), explicit file handle inheritance.
MIT License
0 stars 0 forks source link

(formal) model and explain (implementation) tradeoffs for process and IPC/signaling api #4

Closed matu3ba closed 10 months ago

matu3ba commented 10 months ago

After knowing that Posix signaling and process api is very bad (not yet implemented though), I now finally understand why the Windows one is considered only slightly better: https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?pageId=87151933. I think I should come up with a better (formal) model and explain (implementation) tradeoffs.

matu3ba commented 10 months ago

Moved to https://github.com/matu3ba/sandboxamples/issues/7, so closing.