Windows: threat model and OS protection comparison
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 12/100
Research direction
This is an architecture decision record, not code. Start by reading the linked issues #101, #103, #54, #86 and #95–#104 to see what is already decided or in progress, then review the existing security and sandboxing design in the repository. Done means a maintainer-approved ADR that covers each listed Windows mechanism, a threat model, and a test and rollback plan, and the work should not begin until that approval exists.
Written by the indexing model from the issue text.
Description
Ziel
ADR zu ACLs, Named-Pipe-Identität, AppContainer, Restricted Token, Job Objects, WER, DLL-Suchpfaden, Speicher und unsafe-Grenzen; kein Produktivcode.
Abhängigkeiten und Abgrenzung
#101, #103. Keine Duplikation bestehender Funktionalität; #54 Spiegelmodus, #86 Backup-Check und #95–#104 Architektur berücksichtigen.
Sicherheits- und Integrationsregeln
- Vor Umsetzung Architekturplan, Threat Model, Tests und Maintainer-Freigabe.
- Jeder PR eigenständig und nach Merge voll funktionsfähig; kein Big-Bang.
- Keine automatische Migration, keine destruktiven Defaults, keine neuen Ports.
Tests
- Unit-/Integrationstests inklusive Grenzwerte, Tamper, Crash, Rechte und Fehlerpfade.
- Regression bestehender Schlüssel-/Dateiformate und CLI/API unter Windows und Linux soweit relevant.
- CI fmt/clippy/tests/audit, keine Secrets in Logs.
Definition of Done
- Plan und Sicherheitsentscheidungen freigegeben
- Isolierte Implementierung und Negativtests
- Rückwärtskompatibilität und CI grün
- DE/EN Dokumentation und Einschränkungen
- Rollback und Wiederherstellung nachgewiesen
Rollback
Opt-in/Feature-Flag, alter Betriebsweg unverändert; Abschalten oder PR-Revert ohne Datenmigration möglich. Bei Datenänderungen nur transaktional und mit Restore-Test.
- Dominant language
- Rust
- Stars
- 0
- Forks
- 0
- Avg merge
- 1h 22m
- Merged PRs (30d)
- 72
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from SpecterAoD/pqkeep
-
area:cli good first issue help wanted needs translation priority:P2 type:documentation
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
SpecterAoD/pqkeep#226 ·
Maintainers usually reply within 1 day
-
area:community good first issue help wanted priority:P2 type:documentation
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
SpecterAoD/pqkeep#225 ·
Maintainers usually reply within 1 day
-
area:cli good first issue priority:P2 type:documentation
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
SpecterAoD/pqkeep#224 ·
Maintainers usually reply within 1 day
-
area:release good first issue priority:P2 type:documentation
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
SpecterAoD/pqkeep#223 ·
Maintainers usually reply within 1 day
-
area:cli good first issue priority:P2 type:maintenance
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
SpecterAoD/pqkeep#222 ·
Maintainers usually reply within 1 day
All issues in SpecterAoD/pqkeep
Similar issues
-
ライブラリを追加Openpriority middle
Difficulty 1/5 Under an hour Newbie friendliness 62/100
KATO-Hiro/AtCoderClans#13015 ·
Maintainers usually reply within 1 day
-
needs-review
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
UCS-Care-Group/mailcraft#1429 ·
Maintainers usually reply within 1 day
-
priority: medium ready
Difficulty 1/5 Under an hour Newbie friendliness 88/100
TusanHomichi/PSIV#646 ·
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 70/100
Maintainers usually reply within 1 day
-
area:tui bug P1
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
agent-of-empires/agent-of-empires#5705 · 1 comment ·
Maintainers usually reply within 1 day