Re: [MirageOS-devel] Type enforced security

[Hannes Mehnert <hannes@xxxxxxxxxxx>]

On 09/16/2015 14:46, Anil Madhavapeddy wrote:
> Hannes, is there an example of how to run the nqsb-TLS trace checker
> command-line tool anywhere?

Not really (talking about https://github.com/hannesm/trace-checker).  I
'documented' the dependencies in travis.yml
(https://github.com/hannesm/trace-checker/blob/master/.travis.yml), namely:
- tcpip which allows to set the random to predefined values from the
pcap trace, and exposing more internal functions
- tracing branches of tls and x509
- mirage-net-pcap dealing properly with captures from the loopback
interface (by adding some random ethernet header)

The pcap to trace-check is hardcoded in unikernel.ml.  Together with
david (on his laptop) we modified the output slightly and demanded a
user input between each event (turned out to be very useful for the
presentation at Usenix Security).


hannes

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
MirageOS-devel mailing list
MirageOS-devel@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/mirageos-devel