Bin Xing

aconcli: Issues in command line syntax/flags

4

This issue tracks several (minor) problems in `aconcli` command line syntax/flags. These problems should be easy to fix. - [x] `generate` errs on existing FS layer symlinks - [x] `generate`...

TCP/vsock sockets allow a user to DoS a ACON TD belonging to a different user

3

Currently, we are forwarding a host TCP port to the `acond` TCP port on the guest. But TCP ports don't have access control, so any user logged in the host...

OpenSSL seems certifying its FIPS module on Debian/Ubuntu only. Building `acond` on Debain (and generating an initrd image from [Debian docker image](https://hub.docker.com/_/debian)) seems necessary for a FIPS compliant build. This...