Skip to content

Latest commit

 

History

History
323 lines (205 loc) · 8.53 KB

CHANGELOG.md

File metadata and controls

323 lines (205 loc) · 8.53 KB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

Added

  • Application-specific whitelists
  • Linux LD_PRELOAD/LD_AUDIT library: Database changes propagate to processes in real-time (real-time cache)
  • Modular test framework (compile time reflection)
  • Parent process whitelisting

Changed

  • Linux LD_PRELOAD/LD_AUDIT library: Performance improvements in initialization
  • Linux LD_PRELOAD/LD_AUDIT library: Replaced la_symbind with la_pltenter auditing API to support bind now (-z now) compiler flag
  • Pinned Nightly Rust toolchain to nightly-2022-11-05
  • Restructured project source directories
  • Updated to latest dependencies
  • Updated to Rust 2021 edition

Removed

  • Installer: Patched ARM glibc linker (in favor of glibc 2.35+)
  • Linux LD_PRELOAD/LD_AUDIT library: syslog dependency (in favor of glibc APIs)

Fixed

  • Actions run in zero argument functions interposed by generic hook

0.2.6 - 2021-10-13

Fixed

  • Linux LD_PRELOAD/LD_AUDIT library: Stability enhancements cont.

0.2.5 - 2021-10-10

Added

  • Actions for manipulating arguments
  • Installer: Packaging
  • Installer: Patched ARM glibc linker

Changed

  • Logging system moved to syslog
  • Updated to latest dependencies

Fixed

  • Linux LD_PRELOAD/LD_AUDIT library: Stability enhancements cont.
  • whitebeam --add whitelists correct libraries on multiarch systems

0.2.4 - 2021-09-03

Added

  • Action arguments

Changed

  • Refactored RedirectFunction action
  • Updated to latest dependencies

Fixed

  • Linux LD_PRELOAD/LD_AUDIT library: Stability enhancements cont.

0.2.3 - 2021-08-02

Added

  • Improved baselines
  • Linux LD_PRELOAD/LD_AUDIT library: Support for mkdir/mkdirat hooks
  • Multi-architecture support, aarch64 (ARM64) builds
  • PrintArguments action

Changed

  • Updated to latest dependencies

Fixed

  • Linux LD_PRELOAD/LD_AUDIT library: Poisoned mutexes in multithreaded programs, misc. stability enhancements (10/20)

0.2.2 - 2021-05-12

Added

  • Linux LD_PRELOAD/LD_AUDIT library: Support for 10 hooks

Security

  • The fopen/fopen64/truncate hooks (included in the Essential whitelist) allowed a file to be truncated in the OpenFileDescriptor action prior to the VerifyCanWrite action. This allowed arbitrary files to be truncated with sufficient privileges on Linux, including WhiteBeam startup files. Further, the FORTIFY_SOURCE variants of libc functions, truncate64, and ftruncate64 may have allowed similar bypasses to be possible. Fixed in 0.2.2: https://github.com/WhiteBeamSec/WhiteBeam/security/advisories/GHSA-3f8r-9483-pfxj

0.2.1 - 2021-05-01

Added

  • VerifyCanTerminate action

Changed

  • Updated to latest dependencies

Security

0.2.0 - 2021-04-20

Added

  • Commands to modify WhiteBeam settings, toggle hooks, and load SQL
  • Database-driven design
  • Hybrid hashing
  • Linux LD_PRELOAD/LD_AUDIT library: Generic hook
  • Linux LD_PRELOAD/LD_AUDIT library: Support for 40 hooks including Execution and Filesystem hooks
  • Modular action framework (compile time reflection), 12 actions
  • Modular hash framework (compile time reflection), added hashing algorithms (ARGON2ID, BLAKE3, SHA-3)
  • Project changelog
  • Recovery secret
  • Settings

Changed

  • Improved whitelisting system
  • Linux LD_PRELOAD/LD_AUDIT library: LD_AUDIT loader
  • Replaced SodiumOxide with pure Rust audited cryptography library (RustCrypto)
  • Updated to latest dependencies

Removed

  • SHA-2 hash family

Security

0.1.3 - 2020-03-25

Added

  • Linux installer
  • Linux LD_PRELOAD library: tests

Changed

  • Linux LD_PRELOAD library: refactored fexecve
  • Project is now fully Rust
  • Relicensed as CC-BY-NC
  • Updated to latest dependencies

Removed

  • Dependency on GNU Make

Fixed

  • execl* corrected

0.1.2 - 2020-03-08

Added

  • Baselines
  • Copyright, organization
  • Hashing standardized to libsodium default (SHA3 removed)
  • Linux LD_PRELOAD library: new hook templates, refactored hooks

Removed

  • Linux LD_PRELOAD library: original hook template

0.1.1 - 2020-02-01

Added

  • Exception handling
  • Many new CLI arguments
  • WhiteBeam service: updated to be asynchronous

Changed

  • Updated to latest dependencies

Fixed

  • Correct OS encoding of strings
  • WhiteBeam service: execution log API restricted to localhost

0.1.0 - 2019-12-26

Added

  • libsodium cryptography
  • Project code restructured into workspaces
  • WhiteBeam service: encrypted API route, public key API route

Changed

  • Updated to latest dependencies

Fixed

  • Linux LD_PRELOAD library: warn on seccomp usage (fix scheduled)
  • Optimized memory usage

0.0.9 - 2019-11-20

Added

  • CLI --status argument for monitoring service health
  • Database initialization routines
  • Dynamic whitelists
  • Initial release binaries provided

Changed

  • Updated to latest dependencies

Fixed

  • execl* corrected

0.0.8 - 2019-10-15

Added

  • Cross platform support for uptime, locating data files
  • Database functions, objects are now platform-independent
  • Linux LD_PRELOAD library: hooks structured to be modular
  • Prototype whitelist functionality working
  • WhiteBeam library targets nightly Rust for variadic function support
  • WhiteBeam service: startup script for Linux

0.0.7 - 2019-09-02

Added

  • Linux LD_PRELOAD library: file descriptor support
  • Linux LD_PRELOAD library: hooks for exec family

Fixed

  • Error handling for hashing

0.0.6 - 2019-08-31

Added

  • Whitelisting and hashing of authorized executables

Fixed

  • Refactored library HTTP requests to reduce crashes

Security

0.0.5 - 2019-08-26

Added

  • Created bug bounty
  • Linux LD_PRELOAD library: Execution logging
  • Reduced file size of release binaries
  • WhiteBeam service: API endpoint to process executions (log/exec)

0.0.4 - 2019-08-10

Added

  • WhiteBeam service/CLI

0.0.3 - 2019-06-23

Added

  • Linux LD_PRELOAD library: execve support
  • Linux LD_PRELOAD library: test case for execve

0.0.2 - 2019-05-20

Added

  • Linux LD_PRELOAD library: working function interposition
  • Project code structured to be modular

0.0.1 - 2019-05-20

Added

  • Project license