AsiaBSDCon 2017 Secure CGI

Introduction

Introduction

Welcome.

This tutorial delves into the security models and mechanisms for writing CGI scripts on OpenBSD and FreeBSD.

45 mins.
introduction to CGI/FastCGI security
45
practical: trivial Hello, World application
45
practical: database application: sandbox
45
practical: asynchronous application: sandbox, fork+exec

This focusses on OpenBSD (pledge(2)), FreeBSD (Capsicum), SQLite, and mentions PostgreSQL. You can download the sources from sources.tgz.