Artifact for "The Profile Is Not the Policy: A Case Study of Profile-Guided systemd Hardening"
收藏资源简介:
Scenario definitions, every generated policy, per-evaluation results, control runs, probe scripts with recorded outputs, the study harness, and the analysis code for an empirical case study of profile-guided systemd hardening (SHH v2026.3.8, Ubuntu 26.04, systemd 259). Version 1.6 corrects the harness and one probe: the vsftpd listener wait now fails the start when no listener appears, the FTP download callback appends every block, the vsftpd probe clears systemd's start-rate counter before each restart (its recorded output is from a new run), and the harness README gives the exact SHH build recipe. Data, results and analysis are unchanged from version 1.5. Licences: code MIT (LICENSE), data and documentation CC BY 4.0 (LICENSE-DATA), bundled systemd files LGPL-2.1-or-later.



