search

trailofbits / sinter

A user-mode application authorization system for MacOS written in Swift
https://blog.trailofbits.com/2020/08/12/sinter-new-user-mode-security-enforcement-for-macos/
GNU Affero General Public License v3.0
301 stars 15 forks source link

Basic sync server functionality #8

Closed mike-myers-tob closed 4 years ago

mike-myers-tob commented 4 years ago

We do not want to try to implement our own web server, that would be an anti-goal. Treat the server like a web app. Think in terms of AWS.

Possibly building upon the syntax or protocol used by Santa sync servers (so that initial configurability can be achieved before our own sync server is fully developed).

First deployments of the agent ought to be focused on monitoring and reporting only, so the most important basic sync server functionality is the ability to log or to control logging.

What identity/authentication system would we like to use for users of the server? All we know so far is "Not Google accounts."

The design goal is something as usable as Google Upvote, not as difficult as Moroz (i.e., it has to have an interactive interface, not be a “dead drop”).

mike-myers-tob commented 4 years ago

Basic functionality introduced in https://github.com/trailofbits/sinter/pull/47

We'll keep this issue open, but remove it from the MVP milestone