From 035f6567a74e147f8acbfca780573a289a0ceab2 Mon Sep 17 00:00:00 2001 From: Sebastian Pipping Date: Sat, 4 Mar 2023 05:56:17 +0100 Subject: [PATCH] README.md: Add warning badge about threat model --- README.md | 2 ++ sandwine_threat_model.png | Bin 0 -> 8131 bytes 2 files changed, 2 insertions(+) create mode 100644 sandwine_threat_model.png diff --git a/README.md b/README.md index f20adbd..fb0980c 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,8 @@ [![Run the test suite](https://github.com/hartwork/sandwine/actions/workflows/run-tests.yml/badge.svg)](https://github.com/hartwork/sandwine/actions/workflows/run-tests.yml) [![Run pre-commit](https://github.com/hartwork/sandwine/actions/workflows/pre-commit.yml/badge.svg)](https://github.com/hartwork/sandwine/actions/workflows/pre-commit.yml) +[![sandwine_threat_model.png](https://raw.githubusercontent.com/hartwork/sandwine/main/sandwine_threat_model.png)](https://github.com/hartwork/sandwine#threat-model-and-known-limitations) + # What is sandwine? diff --git a/sandwine_threat_model.png b/sandwine_threat_model.png new file mode 100644 index 0000000000000000000000000000000000000000..c3e433e51302927f90e03fdd311cd454b5431929 GIT binary patch literal 8131 zcmV;!A3WfRP)w@~}5t#8{ z%-8G5d+nc6N@@SUYWXkf&FcPsG9jjk3XHi#JFcy+R3#ba;5waBN-15T)>1EyJ3vYp zbCPycSq-V;gp^WBLuzgH^gsck4IfuGsZx~1k2peVTy>SyyY*IS^5BEMt#{jPQtq_V zByYd{QvT(XKK^*Aef{-#ACyw+qNv@d;i%<%tCySdjCssgfM}y{)Uda+YL{Im19Ng@ z#rW|Ol+8<*O50ank-Yu)_q@^6uNtd=`|Yw~+&FO+LI{aQqp0bq?WplZ)ylB?O-uoT z4dmVqDxPzWOm5OdqLGLMB@znBs7jTj#8F3~&x{d4*5R$UWc%8+;xdE~f*L=mabwi{ zqUz-@dkqks;CVG-H){UG6S8abW{HRObLL=`5&Fwmu{v!*|Ni1Sgb=cO>sD#~{PW&A z8C72{GC&H9xlEtjW;f{b?YDx(n|PSovZa(f`e^i*@#Y#(&w9R zymfLL_R8HOK=g^O_JnO-d@-)@K-<3GeU~`_;bYrK^T!{T!fo5cbqFEcKGOd6*S$5e zlN}%kkGt&&uw_29V}}FGa-v`_u^Ynpa;fJ2!3=mm!3ZhWFfK*T%w<#vF&;cHglJCU)TpO0O@!L?8Q{jqkr- z!n<~fs}MrS#0Cw#wed}(7cEtR`3D{-JJziW-gy$1JTPLi)w9p~vfz+I5*{MmKmS}@ zg%CopO&EKsT6M8G0%VFR5Mwohux8pcDSr6j=p*5-oH)_%{>vECk(Bo`rCBp^6+#H9 zdCfI;O`L=P*`Nw+^U_Pfw$NXGIoc;h9BL#}0tDk(Hq4tRE4Z8IClH=Q}M&PS+lUc!Kna&)7!KW*C2!t zWQ1J{;|dVWjia3l0b=hIQ2vZFq;UIo2>>C4FhG`$9Emp01c=v>6)Q>r2qA<4((JLv zoDPukr=RY3YzQHQFhEvLm>{|P?dNoWz;U%|Ni5)S_&Yaj_(!})FL>P55%0S;ZNlgG zfACHRzc+kG_{{ju{DK37qAde z_+fy|Xx9$Yrp$!{28bWFEMG3g4m~tg?+@oZi8(;#_vs^lGqpvF{~Wy18z8@PcMdR` zB|!iV&bEzk!wt`fvl|;5>ud$PJGO1xwr$(C8TI9>q~_-RXWwn_&dfu1b-DU=-mBs< zwKFWt6n*%isdIERyK{3En2YW0rsmo;Q~3V-qJ*pc{XeYmHaDewF!w6I`_4>NR9MFD zFD;n{S66}E77*~W2E?2lp`m7>rG-FFt~0r&**Qx;`%LJcZ)*Ax{3Z_%Q}n?HGXGdX zfn|GYZE%pMFYqS-|EeLc^!CypdKg3fX4?S52cGgxQpLC5$`&i_96#7@1b^tZ@CsPa zsMplda*Z;_{I$R37G789nChB8xoBw*3KDv8(4+bJI9Ln4wf6SlF9pjMT3anCfGD~K z{@@NjXKHIL@Mr7m1#Y9eyICI|J_{gw3k!l1^Jybn0@v6Yp&>h^4_o3G8IqQQSRW5I2EYRWSAbak~9mMi`Ib1HWJYyd&NBRM(r0~Wgblkx;UGGwgZ%P)fi+cFwJ z$bOBinbR^~Z+tv?`q=8?sX=6<@ah~KM3=iFBU#{DwtNOsQw0_{wFL&E3zVB+UeOy_ z#QFJ&j@h=s^mL))U}Z&cD*5CSGuO}{A5S-Xd70vmK7!vCS+h;p9UU#UQSamg|82Ld z&=m?b0bk(S1`u9Qs`%y`(buuU!W%1qWM8@Rk7n9MDSk&o!2e``qX_*U3Lq%91dzAh zvJD_&P~_joIZ~S#2j+6$eP*Sn$Iv>%!)2_`bI+NiOP7q(U3bw3Cocx%`{Ijo9{cXQ z9Me}EI*mRq_utQbU^54Ev9kTy6wYMfq(8?Pgw}dt8xFjHfpO~U()r$d1*fFTm$kOC z7(H#au8tMG)S~x#>M5SY==-w)1m_BT`T`Hw@CrB@Kv*z96R%eTmvfx3E-1LJFzjx= zS#rJ&XJ`NH3Q*;>+SiApW-LE)jFZ%+j+3oS=4CNJ2>@MK&_;4|!I!6E@CQ%&YRLp> zmus#MKB!NnGM74@u80WwgE#mK&ozLcCtPPNP7LQrU+$~()mQBo+uF`=VR6ne`T;+X ziON*vK+xhEj#hUa2!uZwKv*bn9(3V?iF)ldp*i&8#UEAogl?~=pO(JJ2|6~%$Ik+Y z-%Br9_&@-oc|7(QH~>?974`(){J6M z3FQfah@*}DrJSC%7;nrH4rd94kG=gJi>!k@U0gyM|_r9A+`SwRV z0)x26w>|<$S&g;jibV?m0nub7ne4qEe#%n<3D0&Y7%K*#7}t%KhF*Bno0_;bf%?dW z=6TxZ&NBdLQ-lt|>oZ|Qh|subk|qo7kd~-!3Fsev`qP`|tNV*?aSNYK1|JDJpCo-HucZKslT-g1)g7f^PB&TSTXT^?qb#tD+bYg1CS9QfSdn;i1!kd+Ny4V z?koTy82|9YAL@%uEGtnm>A<)455`=%}gCq8AtDDS%;{NU!d2yl4bcq1AO?mj;cfU&(5yZVC5c6(UgMLq@A$;n4^-r#ZkbLjzu`F?ESjLA&Or9?wI zb{(15`v%czAIwyYGy+IWh0)|Ea}fld!BqN#Y0Lce46QsZ-(=|YFv3aP#RO<2nERfu zT+6Z3(xw1}&_@aM&Apr7yfT`I>J;D+bgb3BW5sAIVQA7X_C*s^-+BN00iZ+v^-%&g z0HJ|j@w~nz^!=X&L6}Cby4~%vFs>RvjEBDPyfJ#kt#3^!*tow?APImS6RquOl>rEW zA0K3yzVoq<<=(r(&6$=PfD{P!S^p@LwWY6V;xu&MaqplJKoW-I;uuyRUh@C*Zg7MD zjdRx37hmy;u^Uoiv;`1x$LZg_V<4S``ptK|!)H9S4In8#0M%#rtDk-HSff;nYNa z<9+Uvu+cv6zYc)V@*Xw}LP|48A;6_b^{6hM%&2|Sh|!S1(&llFGN z+KX>_OR+5dbR7TzJP}JIo}zVTy+y3b00jN{=Remz{ksv|Z+XyzfQf!~1VQesNdS5E z9q#b&h)>@=@i}G0W8*k;6OU9}j^(4RerpWy#34cScy9y{eO+9veje+`?e~Wt`~V+p z`uA-Qdze@g#q1yeVM(B@KjVl}$O4e8>#VW_ZlDpE6thAUivWbHD>vNGCf45N2awFl zV_!_xCG^+d{Dy1jBv#U%F_4`AlG}w)D)3fNjwR8=iM9bmK-;9J&E$8bp%XHIg^!s) z%>DKI?|&ad0-Q+zA$Z2v4Q(~T`07AA#{9k~BoMbs0D|&ivnmn<>UP#dCV=&e`WJ*3 zd>jG9=X~YL?P!9shnBw#ac!``0D}Gq;J6hLSDAN?0K#8Rc#ou=8z6tqbE8nacN;{8nk;R-z#r>Ti+SGTmyumchM9HH~(AOxd=co zeXas$17t0+c2EokC}>wEpGFY{~D@;zUG)uMoeSpZUC)H?uZlpymvefp;R-(No~&%25_`K@ta z9jI#nJPRNwSCV=WHiV{k1t2Kbii<)($a>yq+Be!4K=9e??tb_BrEzd?=iV^N6u$F* z7fWCu7C7F{oysk>H-NO5Bny-q5l;!G12`+0TA{}ZG!FVLEOG$ymi*=}MB3mz>g@d^@wF2weown( zjieRRJPBs?R|hNUl$~a7jI*W!G~er&VmjKYegJ@A^c#x_Q19>?{T{JE-Q!j|Yad9z zVX;KqEbgge)|Br7qqZ5RsU6c43$YObA76=;vF4`8(qZmMz+>sISb%qrycb||srfv{ zL(L0d>z!Pt1=Is$yH)pN1 z(n>3>xv;naP9mI{n6&CSDt0hlr%SoA(n>3>v;qiUuV+qnG2LfVm|Szs@Vis*m|tn7 zl~!5-grE1M0P>~(`UQ7TYvxaO@uRP_(n>2`Kw2#jL9|_DZFSGC7RX8~t+dh_1L@lA zLf%E6vw^MW*BA&|X{D7`T32DU4&Fw=2`Y!sg=Amg^o$<;=58))HV#c-7OU z(nHDabM>-X^vGn1x%ykOz3v0qb^UZg%eOYYJUyqnB+}b;euGUzhmy@ib`&3zthcu* zt4(oYOe>w1Y%Ie|HpR7XV9CZ`&z^#0A+T|d`}w?xqE_ya!5t;(}uaEd%@Q=m1sp``-KJEH(XT z{B3|6+t>SPlG5dasG_&D4mRre0a8c#)GxB^G4ceix2(1iw&62YD9diRr_M5`Gu zJBLqNFL|D307P1YlFYgMkAY$?$qD;T$_0Hr2_Q5&X&ZW;_EUnp-jUW>o-8}g+W}mf z?kOsZ>-L3dO{P+QcV2^383|yMy0r4zP@0VB3omDo%zy|Y#%S2_QpL_!aG!oZhMT746}`&oyl!-=oWtT-5lXR z;Dy&KQ!cAA&)VhhUTu*2#18uMesz>>X>hvqcfzu~WtE|P6m^uq_GRb3a=Cf8?*mVB zZ*H%c)aiDqm$ew-2kB8{P{51ahO8ESust@uFFSHqnRDkX6y-G+kW?n6cPYh-%mFDK zT=eEt^UhB9lp0o4$wAj_yvMwbkc~G0abZM4Crd7&P6+$_$!9*32G#djTmeYQ)k?F? zcS|UDpblmxytmKG$hGJB(r(Wl)TPb@Xa{C>P*vceo&YP*E0sgSjF1vLk-}k0(sHN_>`I ztn<-pa{yv|2o2*^GEYD=l9VO^tathBd1*^n(H+P{lLj{WiqNNE=#LZ;<3U?4|C3yC zEEjrB$OO;S?({VifabvsMgY0wIZ8Vl0Yor<^mjH9B}$|brXlC{C@C9@Cm}pNK@2dU9#Ga zS*C%pcM~3fmyk9#)j{9pE-)7Y5PcoV$CU*$QWG5*`QNFDS#Nm5_!u+RBS6Z^#6zWV zmq-%}*uHvv?KRgEza`NB%iPcRW`fRj*L0w8!v9n*@n!##aZh$qydZ2-|eeF*^l z7I`maLLE>5Vw{)8K)A2~4vW+Oc1#^k50>5U?G{p(YpxIdLW z1rU1yhGez0*&Us@cNTyUVk3ZL5uvH`MF{VxQv%Df>eRb5_xi6> z4Ox4+RshHdShU2>ei;Z@s9Pud6+h#8V1a3C$C>)y-$?+GkTPp;-TM zM)@cg?EuXI2se%Y3woB)nYLtNsxxLu8^vHiVg!)P^RkqpCZ6A*4(g|&U@{sX4K465 zbu=xC`OTL)2OuVDuAek70q9OA3_#MNU;ohz)kC}MKR_0Ml;V5|fXH?$Mq$jkV+ikDpq7y4=EMgH zvMB)3$3y&0nRtMkCIA`1Qfw`SrukK-3A|uTce$|AjI}}iI%g&T0ZeBBh(0t22t&{J zPKuLL6yxLSI}0FqEqwE$cvrkT)L46^{zc@hPQ)sxnj zral75l4FNQmj}~4H-YjKD6EEfuk%-chwew3~L%6+xitPXeG|u1Q|G1S86C z?lQp-0g!yx{@No^Ou#sHG_B)yfk5uA&LtTEB3jke&C+-aR~C)IkwW>kI> zq8(qn3qXvGQzu(&;2mfVKw6Mc+(a4b)o~3A0mRr8C&Ak+n^sk^&Xo&PTV-`_0HRD* zBffN=N_97mSv<{Q7WGJt6`sYXEWrT8*me#L7Zvv|Pz8cqs$yJOUD_wryU*qk>QE}} zxaa`V33o$4`TrL{2;aH-&?W?&2|`Rrfaz;}nZ;ppxS}*|@vjc4BE-1cA~7ZczhH3W zUJ6VkW~0A%0SHBf&=RvCz<~yELmlU9dH2*l5d1EH-u$$34R{#WK)Nz^5dc<3L2UiU zy_8U<3^>}Ma!2Bd^qv%-aUX~{q0ay$qI3a)EM5XW017NE)mJAmiIG?m?W3do0Rry` zv;_b0q&cmhDVcaKA`h~FSzO|FwGU`1OFJ$yfDB77R|^EA?Ms-QFMNs!ilr0)9ZDuD z7XmA3UpjQd6ya@|W~bL3Qof0!AFq~_!L@R9njU9kN^qT9c~RCYfB^sm741FBdZOL# z0uZErL;wG$y|V{|{p%vxAMbQ89p zVhe&RVD-B4tqj`5F*+pg+5~-&&ypzD?k-9^#mylgqjPA zBk5L}DV0tSGvLn(<(V+2VLbWCb)Sl%pY7WGoD-j?S4AseM8Skrp~d)B3+S zKJGAE7zPrnkhAg1$U$IBsxG{5g!c@ZXxq#WO$Z?}!#GZ~KxvF5?8eFlGTrsI@J0k3 zHEwrJKnnfq2f;YFVL(t3-?I=xB!+RYd@%~WaZPPA5VYNFnZNQ|@f`>tBDkgrga&aK z-OuJhKn$H?g%Bb;)YB2xRvIV2yNCz1P&`pwiEJvp6U_s;-isqOI$S5tm1^!PjSD+1 zG7gApB|1_FAriy+HA#((`R!w+*~YS8#1rL}$U1+AujLOw?lu|Lv=^y+K0*o_SD@G@BCRe`5m)IU{zM&E96V!FAHra-Hvl zwwhhqZg#_;zT=M{`{UQH53Wyz^BEq0c71fcaXsB`cGn-@a$Wi3=a3{xl3K14jOmQ+ djPX@G;U^hM>#f}TEtLQO002ovPDHLkV1h(FhI;@2 literal 0 HcmV?d00001