summaryrefslogtreecommitdiff
path: root/doc/privexec.tex
diff options
context:
space:
mode:
authorJakob Kaivo <jkk@ung.org>2021-02-07 13:47:26 -0500
committerJakob Kaivo <jkk@ung.org>2021-02-07 13:47:26 -0500
commit5e74f5da46dd78a239a2af7c8a71041f2c480d80 (patch)
treee6090227677bb78d0a28d2b614df58e96a2482e1 /doc/privexec.tex
parente1a48622522776f8f80b119f6d3e5bb604b601a5 (diff)
begin paper with abstract and outline
Diffstat (limited to 'doc/privexec.tex')
-rw-r--r--doc/privexec.tex27
1 files changed, 27 insertions, 0 deletions
diff --git a/doc/privexec.tex b/doc/privexec.tex
new file mode 100644
index 0000000..15a5815
--- /dev/null
+++ b/doc/privexec.tex
@@ -0,0 +1,27 @@
+\documentclass{article}
+
+\title{%
+ PrivExec\\
+ \large Safe privilege elevation through responsibility separation
+}
+\author{Jakob Kaivo}
+
+\begin{document}
+\maketitle
+
+\begin{abstract}
+The discovery of exploitable bugs in critical security components such as
+\texttt{sudo} happens with alarming frequency. Complexity of the SUID binary
+plays a significant part in allowing these bugs to exist in the first place.
+This paper presents a much simpler replacement for \texttt{sudo} which
+separates the different stages of privilege elevation into separate processes,
+only the last of which is fully elevated.
+\end{abstract}
+
+\section{Complexity}
+
+\section{Use Case Reduction}
+
+\section{Responsibility Separation}
+
+\end{document}