OpenBMC Security Working Group Kick Off

Andrew Jeffery andrew at aj.id.au
Thu Jun 7 12:44:40 AEST 2018


> > > A design of OpenPOWER systems is that the BMC and the Host don't have to
> > > trust each other, and this should extend to a host that's hostile
> > > towards the BMC.
> > >
> > > I'd be surprised if we didn't find bugs in both mboxd and host ipmi if
> > > we started fuzzing those interfaces.
> >
> > I have a neglected branch floating around that adds an AFL harness for
> > mboxd. I should start hacking on that again :)
> >
> 
> Maybe for OpenBMC Fix it next week? :D

Added it to the list

Andrew


More information about the openbmc mailing list