
<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">We currently don’t have security tests (unless I’m wrong—and I’d love to be wrong if someone has this work hiding somewhere!), but it’s something I think we need to have and should prioritize as a community. <div class=""><br class=""></div><div class="">Jesse, would you be able to outline what info would make some sort of ‘security health check’ valuable? What’s the output that would make it useful?</div><div class="">(Bonus points if you’re also up for leading the charge in getting this work done!)</div><div class=""><br class=""></div><div class=""> <br class=""><div class="">

<div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class="">Anne Bertucio</div><div class="">OpenStack Foundation</div><div class=""><a href="mailto:anne@openstack.org" class="">anne@openstack.org</a> | irc: annabelleB</div><div class=""><br class=""></div></div><br class="Apple-interchange-newline"></div><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">

</div>

<div><br class=""><blockquote type="cite" class=""><div class="">On Aug 22, 2018, at 7:46 AM, Larrew, Jesse <<a href="mailto:Jesse.Larrew@amd.com" class="">Jesse.Larrew@amd.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hi all,<br class=""><br class="">Are there any tools or tests available that aim to validate the security promises of the Kata architecture? I've looked in the testing repo, but that seems to contain mostly functional tests. I'm interested in something that could be used to validate statements like, "The guest cannot do X. The host cannot do Y. Etc." Does something like this exist for Kata?<br class=""><br class="">Sincerely,<br class="">Jesse<br class=""><br class=""><br class="">_______________________________________________<br class="">kata-dev mailing list<br class=""><a href="mailto:kata-dev@lists.katacontainers.io" class="">kata-dev@lists.katacontainers.io</a><br class="">http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev<br class=""></div></div></blockquote></div><br class=""></div></body></html>