ouma - a hardened Linux libc written entirely in Rust
▲ 12 r/rust

ouma - a hardened Linux libc written entirely in Rust

Hi everyone! I've been writing a libc for my GNU/Linux distro that focuses on being secure, correct and safe.

I try to minimize the usage of unsafe keywords to raw pointer referencing, slice creation from raw pointers, variadic argument manipulation and inline assembly.

For now my libc has a working locale, fast string to number conversion and vice versa, working printf and multibyte conversion functions.

There are still bugs and the project is early in development, though they are being caught.

Unlike redox's relibc, ouma is written entirely in rust with some bits of assembly (yes, even strtold returns valid long double values according to the architecture abi on Linux).

Aside from writing the entire libc in a memory safe language I also want to support modern compiler mitigations that require libc support such as shadow call stack, Intel CET, cross DSO cfi aka CFI for dynamic libraries.

Anyway, the links to the project are here:

GitHub: https://github.com/rseclinux/ouma
Codeberg: https://codeberg.org/gnu2/ouma

If you are willing to contact me, you can mail me at: theexanori@gmail.com

edit: I've made ouma specifically to force people to open source their entire projects if they are willing to use it. I do NOT state it as musl alternative in terms of being corporate/commercial friendly libc implementation. I want users of my libc and other projects to be sure that their software that is linked against ouma is free as freedom, does not hide anything behind the scenes because I personally believe that with transparency comes the security and by extension privacy as well. There might be issue with lgplv2 projects but I think I will write a linking exception for them

u/protonesso — 19 hours ago

[For hire] A systems software engineer - Rust, C - Remote

Hi! I am a systems software engineer who specializes in writing safe and reliable software. I am available full-time or part-time. My time zone is UTC+3.

Highlights: C, Rust, cmake, meson, Google test, ATF testing, low-level, POSIX API, Linux capabilities and namespaces

What can I do?

  • Write safe and reliable software in Rust and C language so you can be sure your infrastructure won't get down and has less space to be hacked.
  • Using an automated test framework such as Google test and ATF-C in order to ensure quality of your product
  • Debugging with sanitizers and debuggers such as GDB and LLDB
  • Research new methodologies of writing safe and reliable software
  • Create sandboxed environment for existing Linux programs to make your apps confined

Rate: 80$/hour

CV: https://keepitupkitty.github.io/cv.pdf

reddit.com
u/protonesso — 5 days ago
▲ 3 r/linuxfromscratch+1 crossposts

Memory safe and secure/hardened LFS

Hello everyone, years ago I've posted my lfs project on this sub and many things have happened in my life and it led me to make a new project. From scratch. For now I am focused on writing libc entirely in Rust for this GNU/Linux distro, as well I would write a new bootloader with better full disk encryption implementation and openpam modules, all of them in Rust. As a plus I've made a list of packages to build a self contained sdk that will allow full source bootstrap from tools like GNU mes and other languages (except Rust for now) will be bootstrapped from C/C++ toolchain (like Go and dlang), the package list has little to none gnu packages (except autotools, coreutils and findutils). If you are interested in that you can dm me or write under this post.

sources: https://codeberg.org/gnu2/ouma

GitHub org: https://github.com/rseclinux

Edit: added source links

u/protonesso — 24 days ago