bartoszek/zephyr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
102,229 Commits 3 Branches 0 Tags 1.5 GiB
2db9ea94de
Commit Graph

202 Commits

Author SHA1 Message Date
Flavio Ceolin
3fb795a27f doc: security: cve-2024-1638 left embargo 
Disclose information about cve-2024-1638.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2024-02-20 15:07:07 -06:00
Flavio Ceolin
a6e9f12ca8 doc: security: cve-2023-5779 left embargo 
Disclose information about cve-2023-5779.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2024-02-18 18:05:51 +01:00
Flavio Ceolin
194bc9b176 doc: security: cve-2023-6249 left embargo 
Disclose information about cve-2023-6249.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2024-02-18 18:05:51 +01:00
Flavio Ceolin
a8690fd862 doc: security: cve-2023-6749 left embargo 
Disclose information about cve-2023-6749.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2024-02-18 18:05:51 +01:00
Flavio Ceolin
7d3eee7b27 doc: vuln: Add CVEs under embargo 
Add placeholders for CVEs under embargo.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2024-01-05 23:57:30 +01:00
Flavio Ceolin
052590b0c1 doc: vuln: Disclose information about CVE-2023-4424 
Information about CVE-2023-4424

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-12-09 15:31:42 -05:00
Mia Koen
0bcad09392 bluetooth: mesh: Doc fix Bluetooth mesh to Mesh 
SIG has changed Bluetooth mesh to Bluetooth Mesh
Updating zephyr docs accordingly
Leaving out old release notes

Signed-off-by: Mia Koen <mia.koen@nordicsemi.no>
 2023-12-01 10:56:18 +00:00
Flavio Ceolin
b43271dc2d doc: vuln: Disclose information about CVE-2023-5055 
Information about CVE-2023-5055

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-11-23 10:01:30 +01:00
Flavio Ceolin
253e266fc5 doc: vuln: Disclose information about CVE-2023-5139 
Information about CVE-2023-5139

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-10-27 10:52:26 +02:00
Flavio Ceolin
31a92fc5e3 doc: vuln: Add information about CVE-2023-5753 
Information about CVE-2023-5753

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-10-24 23:49:59 +02:00
Flavio Ceolin
05fb54b090 doc: security: Update info about tools 
Since there are multiple static analysis tools being used
now, it is better to change references for a particular one
and just point to static analysis section in the documentation.

JIRA is no longer used for tracking security issues. Update it
to Github.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-10-20 15:11:01 +02:00
Flavio Ceolin
90b9809c6f doc: security: cve-2023-4257 left embargo 
Disclose information about cve-2023-4257.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-10-14 18:43:49 +03:00
Flavio Ceolin
52cf7e6fdf doc: vuln: Add information about CVE-2023-4263 
Information about CVE-2023-4263

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-10-14 18:43:27 +03:00
Flavio Ceolin
49d4ad9315 doc: vuln: Add information about CVE-2023-5563 
Information about CVE-2023-5563

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-10-13 20:19:51 +03:00
Flavio Ceolin
b1fdce6336 doc: vuln: Add information about CVE-2023-4259 
Information about CVE-2023-4259

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-10-10 21:11:33 +03:00
Flavio Ceolin
29f6ea431d doc: vuln: Add information about CVE-2023-3725 
Information about CVE-2023-3725

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-10-09 10:16:53 +02:00
Benjamin Cabé
a601b43ef8 security: doc: add missing headings 
Add headings for 2022 and 2023 CVEs to make document navigation easier.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
 2023-10-06 13:58:51 +01:00
Flavio Ceolin
4667a0c07e doc: vuln: Add information about CVE-2023-4260 
Information about CVE-2023-4260

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-10-06 12:20:46 +01:00
Flavio Ceolin
66d76d4afa doc: vuln: Add CVEs under embargo 
Add placeholders for CVEs under embargo.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-10-05 09:13:53 +01:00
Flavio Ceolin
078967671c doc: vuln: Add information about CVE-2023-4264 
Information about CVE-2023-4264

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-10-04 21:46:57 +03:00
Flavio Ceolin
e3dc860429 doc: vuln: Add information about CVE-2023-4262 
Information about CVE-2023-4262

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-10-03 15:36:28 +01:00
Flavio Ceolin
390fcd9adf doc: vuln: Add information about CVE-2023-5184 
Information about CVE-2023-5184

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-10-02 16:58:21 +01:00
Flavio Ceolin
59c501c6df doc: security: Add information about backports 
Clarify about how to proceed with backports for vulnerabilities.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-09-27 20:15:56 -04:00
Flavio Ceolin
f4baa2b094 doc: vuln: Add information about CVE-2023-4258 
Information about CVE-2023-4258

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-09-26 08:39:16 +02:00
Flavio Ceolin
3c1394c17a doc: vulnerabilities: Add information about CVE-2023-4265 
Add information about CVE-2023-4265

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-08-16 15:05:35 +02:00
Flavio Ceolin
675726f7c0 doc: vulnerabilities: Add information about CVE-2023-1902 
Add information about CVE-2023-1902

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-08-04 22:53:21 +00:00
Flavio Ceolin
5e4789bceb doc: vulnerabilities: Add information about CVE-2023-1901 
Add information about CVE-2023-1901

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-08-04 22:53:21 +00:00
Flavio Ceolin
b7f35a8f29 doc: vulnerabilities: Add information about new vulnerabilities 
Add a placeholder for CVE-2023-1901 and CVE-2023-1902.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-06-15 13:55:07 -04:00
Flavio Ceolin
40312a8578 doc: vulnerabilities: Add information about CVE-2023-0779 
Add information about CVE-2023-0779

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-06-02 18:59:27 -04:00
Flavio Ceolin
d3193eae33 doc: vulnerabilities: Add information about CVE-2023-0397 
Add information about CVE-2023-0397

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-06-02 18:59:27 -04:00
Benjamin Cabé
5e36dc52ec doc: security: Refresh hardening tool doc page 
Improved the wording of the Hardening tool documentation to better
reflect that it does suggestions for both options that could be enabled
for improved security, as well as options that should be disabled for
they may expose to vulnerabilities. Also fixed the "Usage" section which
was stale.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
 2023-05-22 12:21:19 +02:00
Christian Schlotter
951a37d5a0 doc: security: Unify style 
Unify style in Zephyr Security Overview.

Signed-off-by: Christian Schlotter <christian.schlotter@zeiss.com>
 2023-04-21 16:33:16 +02:00
Flavio Ceolin
68d421e73c docs: security: Add published CVEs information 
Add information about 3 CVEs recently published.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-02-15 19:22:24 +09:00
Flavio Ceolin
05d3b57851 doc: security: Disclose CVE information 
Add information about CVE-2022-2993

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2023-01-07 21:34:33 +01:00
Flavio Ceolin
a61ca79041 doc: vulnerabilities: Add information about CVE-2022-2741 
Add information for published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2022-11-01 12:01:00 +01:00
Flavio Ceolin
ea8c6dbc03 doc: vulnerabilities: Add information about CVE-2022-1041 
Add information for published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2022-11-01 12:01:00 +01:00
Flavio Ceolin
d170982947 doc: vulnerabilities: Add information about CVE-2022-1042 
Add information for published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2022-11-01 12:01:00 +01:00
Flavio Ceolin
01a02e6a29 doc: vulnerabilities: Add information about CVE-2022-1841 
Add information for published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2022-11-01 12:01:00 +01:00
Stephanos Ioannidis
8a7eb68c0f doc: security: Fix outdated link 
This commit updates the outdated link to "OWASP Top Ten Project".

Signed-off-by: Stephanos Ioannidis <stephanos.ioannidis@nordicsemi.no>
 2022-09-29 12:20:14 +02:00
Flavio Ceolin
b26ea8b428 vulnerabilities: Add CVE information 
Add information about CVE-2022-0553.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2022-06-06 17:59:28 +02:00
Flavio Ceolin
5b8cc4f6f3 vulnerabilities: Add vulnerabilities under embargo 
Add entries for vulnerabilities under embargo.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2022-05-25 13:34:52 -07:00
Anas Nashif
0e727cf5a9 doc: get rid of reference section 
Move last remaining items from reference section to the appropriate new
section in the new structure.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
 2022-04-07 16:35:19 +02:00
Nazar Kazakov
f483b1bc4c everywhere: fix typos 
Fix a lot of typos

Signed-off-by: Nazar Kazakov <nazar.kazakov.work@gmail.com>
 2022-03-18 13:24:08 -04:00
Flavio Ceolin
e14d07a869 security: docs: Add CVE-2021-3966 
Add information about CVE-2021-3966

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2022-02-17 19:05:08 -05:00
Flavio Ceolin
ead018cb12 security: docs: Add CVE-2021-3861 
Add information about CVE-2021-3861

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2022-02-08 07:02:36 -05:00
Flavio Ceolin
2a0ae5edac security: docs: Add CVE-2021-3835 
Add information about CVE 2021-3835

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2022-02-08 07:02:36 -05:00
Flavio Ceolin
449c37808a doc: security: Fix one vulnerability report 
The issue was properly fixed but this document was not updated.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2022-01-13 18:34:15 -05:00
Flavio Ceolin
31a911ecc2 doc: security: Remove unused image 
zephyr-workflow is no longer used.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-12-01 05:03:59 -05:00
Flavio Ceolin
d21bfcae2e docs: security: s/JIRA/GitHub 
Update vulnerability report / tracking information. Zephyr is no
longer using JIRA.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-12-01 05:03:59 -05:00
Flavio Ceolin
f7b320a7c3 doc: security: Update information about CVE-2021-3436 
Update old CVE the proper information.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-10-06 18:18:06 -04:00
Flavio Ceolin
6c488c8556 doc: security: Update information about CVE-2021-3510 
Update old CVE the proper information.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-10-06 18:18:06 -04:00
Flavio Ceolin
613b38c24b doc: security: Update information about CVE-2021-3625 
Update CVE that left embargo with the proper information.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-10-06 18:18:06 -04:00
Flavio Ceolin
879438a424 doc: security: Update information about CVE-2021-3319 
Update old CVE the proper information.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-10-06 18:18:06 -04:00
Flavio Ceolin
bb5b5fe544 doc: security: Update information about CVE-2021-3581 
Update CVE that left embargo with the proper information.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-10-06 18:18:06 -04:00
Flavio Ceolin
6cc84412df security: Update vulnerabilities document 
Add information about recent published vulnerabilities.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-06-23 06:18:59 -04:00
David Brown
f6b22ecc74 doc: security: Add CVE-2021-3581 to docs 
Update release notes for 2.6, and the vulnerabilities page to mention
CVE-2021-3581.  This CVE is under embargo until Sept 4, 2021.

Signed-off-by: David Brown <david.brown@linaro.org>
 2021-06-04 13:57:40 -05:00
David Brown
0b2798fdfe doc: security: Change 'master' to 'main' 
Fix up a handful of references to 'master' in the security documentation
to refer to the new 'main' branch.

Signed-off-by: David Brown <david.brown@linaro.org>
 2021-05-28 10:13:39 -05:00
Flavio Ceolin
2b3e6166d9 doc: security: Publish CVE-2020-3323 info 
CVE was previously under embargo.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-05-18 14:55:38 -04:00
Flavio Ceolin
a4b04996aa doc: security: Publish CVE 2021-3321 
Publish CVE that left embargo period.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-05-18 14:55:38 -04:00
Flavio Ceolin
66029cf211 doc: security: Publish CVE under embargo 
Publish CVE-2021-3320.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-05-18 14:55:38 -04:00
Flavio Ceolin
4ea9ddb627 doc: security: Add CVE-2020-10065 info 
Add information about 2020-10065 CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-05-18 14:55:38 -04:00
Flavio Ceolin
fa84e13993 doc: security: Add backport info for old issues 
Several issues were missing information about backports.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-05-18 14:55:38 -04:00
Flavio Ceolin
13f11b422d doc: security: Add CVE-2020-13603 info 
This CVE is already published on github.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-05-18 14:55:38 -04:00
Anas Nashif
6df4405cca doc: fix typos 
Fix various typos in the docs.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
 2021-04-30 16:03:08 -04:00
David Brown
a1533cacdf doc: security: Fix broken link to moved doc 
Now that the security process has been moved to its own page, fix a
broken link that was to the current page.

Signed-off-by: David Brown <david.brown@linaro.org>
 2021-03-17 17:47:26 -04:00
David Brown
9cf59acf73 doc: security: Move vulnerability reporting to new page 
Create a new page containing just the information on reporting security
vulnerabilities, leaving a link behind in the old section.  This will
make it easier to reference this document, rather than it being in the
midst of a larger document.

Signed-off-by: David Brown <david.brown@linaro.org>
 2021-03-17 17:47:26 -04:00
Flavio Ceolin
f270e17b32 doc: security: Update vulnerabilities information 
Update CVEs information

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2021-02-10 07:14:53 -05:00
Gerson Fernando Budke
57c099a612 doc: release: 2.4: Add notes and security info about UpdateHub 
Add release and security notes related to UpdateHub.

Signed-off-by: Gerson Fernando Budke <gerson.budke@ossystems.com.br>
 2020-09-25 14:27:57 -05:00
Flavio Ceolin
7c86add30f doc: release notes: Update security notes for 2.4 
Add information about security issues addressed in the v2.4.0
release.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2020-09-22 13:39:46 -05:00
Flavio Ceolin
b7d27b94df doc: security: Avoid confusion with code guideline 
Security documentation contains a code guideline section that is more
about security principles than code guidelines itself. Just removing
the mention do code guideline to avoid possible confusions with
upcoming project code guideline based on MISRA-C.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2020-07-07 19:29:21 -04:00
David Brown
b32b5e151a doc: security: Release CVEs from embargo 
These CVEs have been released from embargo.  Include details in the v2.3
release notes, and in the vulnerabilities document.

Signed-off-by: David Brown <david.brown@linaro.org>
 2020-06-04 22:11:31 +02:00
David Brown
ed2d263e0c doc: release notes: Update security notes for 2.3 
Add information about security issues addressed in the v2.3.0 release.

Signed-off-by: David Brown <david.brown@linaro.org>
 2020-05-11 23:13:32 +02:00
David Brown
6fa228efac doc: vulnerabilities: Document public CVEs 
Include documentation for CVE issues that are now out of embargo.  This
includes links to the CVE database, as well as referencing the PRs
within Zephyr that fix these issues.

Signed-off-by: David Brown <david.brown@linaro.org>
 2020-05-11 22:50:02 +02:00
David Brown
99374d7808 doc: security: Update vulnerability disclosure 
Changes to the security vulnerability reflecting policy changes approved
by the board.

Signed-off-by: David Brown <david.brown@linaro.org>
 2020-05-02 11:37:43 -04:00
David Brown
4759da8819 doc: security: Create a vulnerabilities report 
In addition to having security vulnerability fixes reported within each
release note page, consolidate all of them in a new vulnerabilities
document.

This gives us two advantages: 1. The vulnerabilities can easily be
referenced in a single place, which is useful for someone trying to
cross reference against CVE lists, and 2. It allows a release to be made
with just CVE numbers when issues are under embargo, and the details can
be added to this vulnerabilities page.  The release notes will be locked
to a tag, and updates will not be visible.

Signed-off-by: David Brown <david.brown@linaro.org>
 2020-03-05 12:39:13 +02:00
Flavio Ceolin
b5bb4cd085 doc: security: Add hardening tool information 
Add basic reference to hardening tool.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
 2020-02-06 23:05:38 -05:00
Ulf Magnusson
984bfae831 global: Remove leading/trailing blank lines in files 
Remove leading/trailing blank lines in .c, .h, .py, .rst, .yml, and
.yaml files.

Will avoid failures with the new CI test in
https://github.com/zephyrproject-rtos/ci-tools/pull/112, though it only
checks changed files.

Move the 'target-notes' target in boards/xtensa/odroid_go/doc/index.rst
to get rid of the trailing blank line there. It was probably misplaced.

Signed-off-by: Ulf Magnusson <Ulf.Magnusson@nordicsemi.no>
 2019-12-11 19:17:27 +01:00
Thomas Ebert Hansen
d83f926c38 doc: security: Change link to development model. 
The development model docs are now part of the technical docs.

Signed-off-by: Thomas Ebert Hansen <thoh@oticon.com>
 2019-03-26 22:21:59 -04:00
Thomas Ebert Hansen
2203489f6d doc: security: Update embargo period 
The embargo period is 60 days.

Signed-off-by: Thomas Ebert Hansen <thoh@oticon.com>
 2019-03-26 22:21:59 -04:00
Thomas Ebert Hansen
eb34b86fe5 doc: security: Correct indentation 
Use similar indentation as the other bullet points above.

Signed-off-by: Thomas Ebert Hansen <thoh@oticon.com>
 2019-03-26 22:21:59 -04:00
Thomas Ebert Hansen
bb881d2d9d doc: security: Update Security Group definition 
Rewrite who the members of the Security Group are
and move the 'ability' of the members to an outer
bullet point.

Signed-off-by: Thomas Ebert Hansen <thoh@oticon.com>
 2019-03-26 22:21:59 -04:00
Thomas Ebert Hansen
f1ad50f85a doc: security: Reword unintelligible sentences 
The sentence "To process process documentation." does not make
any sense at all.

Add missing "the" to the sentence "in form of".

Signed-off-by: Thomas Ebert Hansen <thoh@oticon.com>
 2019-03-26 22:21:59 -04:00
Thomas Ebert Hansen
7166e35487 doc: security: Correct statement about Coverity 
Remove statement that static code analysis is planned for the future.

Signed-off-by: Thomas Ebert Hansen <thoh@oticon.com>
 2019-03-26 22:21:59 -04:00
Thomas Ebert Hansen
0f0103e0b1 doc: security: Unify citations 
Use similar style for citations.
Add online references where applicable.

Signed-off-by: Thomas Ebert Hansen <thoh@oticon.com>
 2019-03-26 22:21:59 -04:00
Thomas Ebert Hansen
c9fec3ca7d doc: security: Fix section reference 
Replace reference to Chapter 4 with Secure Design section.

Signed-off-by: Thomas Ebert Hansen <thoh@oticon.com>
 2019-03-26 22:21:59 -04:00
Thomas Ebert Hansen
33d1067d25 doc: security: Unify name of security subcommittee 
Use the term 'Zephyr Security Subcommittee' where applicable.

Signed-off-by: Thomas Ebert Hansen <thoh@oticon.com>
 2019-03-26 22:21:59 -04:00
Anas Nashif
2b9458c378 doc: restructure and create index pages 
Move all lead pages to be index pages and create redirect rules from the
old pointers.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
 2019-02-05 07:04:40 -05:00
Anas Nashif
4d93a9797f doc: changed structure and layout 
Move to the new structure with both:

 - API Reference
 - User and Developer Guides

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
 2019-02-05 07:04:40 -05:00
David B. Kinder
89db6e3ad3 doc: fix formatting error in security doc 
Continuation of a bullet list item wasn't indented properly, causing a
new list to be started (with odd indentation).

Signed-off-by: David B. Kinder <david.b.kinder@intel.com>
 2019-01-24 18:27:27 -05:00
Anas Nashif
6b22a93286 doc: remove leading 'Zephyr' for some documentation sections 
This is redundant information. We already know we are Zephyr.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
 2019-01-07 10:31:51 -05:00
David Brown
00ef6b5e3c doc: Enumerate threats in model 
Certain external requirements require justification that threats in a
threat model have been satisfied.  In order to do this, the threats must
be enumerated, and given labels.

Add labels to the threats.  Use rts's citation model to allow the
threats to be grouped and listed at the end of the document to help with
cross referencing.

Signed-off-by: David Brown <david.brown@linaro.org>
 2018-06-22 12:30:06 -04:00
Andy Gross
8b9042c419 doc: security: Remove revision history 
This patch removes the revision history from the security overview
document.  With this file being maintained in git, there is no need
for an additional in-document revision history table.

Signed-off-by: Andy Gross <andy.gross@linaro.org>
 2018-06-07 18:05:01 -05:00
Andy Gross
2825f79a2c doc: security: Update security overview for recent features 
This patch revises the security overview document to bring the
information pertaining to stack protection, thread separation,
and memory protection up to date with the current state of the
software releases.

Signed-off-by: Andy Gross <andy.gross@linaro.org>
 2018-06-07 18:05:01 -05:00
David B. Kinder
7760b941f9 doc: fix misspellings in docs 
Scan and fix misspellings missed during regular reviews.

Signed-off-by: David B. Kinder <david.b.kinder@intel.com>
 2018-06-01 09:01:43 -04:00
David Brown
a7ffc83bcc doc: Create a sensor threat model doc 
Add a doc to the security section enumerating a threat model for a
sensor-type device.  This will help the direction of work to meet these
security requirements for this particular application.

Signed-off-by: David Brown <david.brown@linaro.org>
 2018-05-25 17:23:07 -04:00
David B. Kinder
c5615aada4 doc: change https://zephyrproject.org/doc refs 
Remove extra indirection to documentation (and required
server link redirection) from https://zephyrproject.org/doc/...
to http://docs.zephyrproject.org/...

Signed-off-by: David B. Kinder <david.b.kinder@intel.com>
 2018-05-02 18:32:44 -04:00
Andy Gross
ff22490d56 doc: Update security feature information 
This patch updates information pertaining to userspace related security
features.  Some of these have been added to releases and this needs to
be shown in the document.

Signed-off-by: Andy Gross <andy.gross@linaro.org>
 2018-02-12 13:47:19 -05:00
Andy Gross
ede2dc6ae1 doc: Update security vulnerabilities email address 
This patch fixes the email used for reporting security
vulnerabilities.

Signed-off-by: Andy Gross <andy.gross@linaro.org>
 2017-11-03 14:19:08 -07:00
Anas Nashif
780324b8ed cleanup: rename fiber/task -> thread 
We still have many places talking about tasks and threads, replace those
with thread terminology.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
 2017-10-30 18:41:15 -04:00
David B. Kinder
8c708fd049 doc: fix misspellings and hyphen use 
fixed error introduced in application.rst (v1.8) along with a general
spelling check pass including consistent spelling of "runtime" and
hyphenated words with "pre-"

Signed-off-by: David B. Kinder <david.b.kinder@intel.com>
 2017-09-20 15:33:43 -04:00
David B. Kinder
19d9d41921 doc: fix broken wiki reference 
Reference to the Development Model should point to GitHub wiki

Signed-off-by: David B. Kinder <david.b.kinder@intel.com>
 2017-09-06 14:50:42 -05:00
David B. Kinder
1257bdc9ec doc: add project security docs 
While we're working on doc publishing that separates
kernel docs that are release-specific from project docs
that aren't, (temporarily) put the security documents
here so they'll be published with the 1.9 release.

Signed-off-by: David B. Kinder <david.b.kinder@intel.com>
 2017-08-17 23:20:40 -04:00