Use of grsecurity-hardened kernels on servers implemented
MITIG53 · Implemented: In place. · Defined in mitigations.py:110
Threats it mitigates
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Known vulnerabilities in Tor (incl. Onion Service cryptography, authentication) THREAT35 | mitigated | 6 medium | 6 medium |
| Unknown vulnerabilities in Tor (incl. Onion Service cryptography, authentication) THREAT37 | partially mitigated | 6 medium | 6 medium |
| Unknown vulnerabilities in Python or libraries used by SecureDrop THREAT38 | accepted | 6 medium | 6 medium |
| Monitor server is compromised THREAT66 | accepted | 4 medium | 4 medium |
| Unknown vulnerabilities in the Linux Kernel THREAT40 | partially mitigated | 6 medium | 3 low |
| Known vulnerabilities in the Linux kernel or packages used by app/mon servers THREAT41 | mitigated | 6 medium | 3 low |
| Attacker exploits postfix THREAT67 | partially mitigated | 4 medium | 2 low |