How to harden Rust servers?

help
1

Your daily reminder that, while Rust's safe APIs are memory-safe, that doesn't extend to /proc/self/mem and so, if there is a path traversal to that, secrets could still leak.

So, what hardening approaches are there for Rust? I typically use axum, but would be glad to hear about any framework. If the approach is #[!forbid(unsafe_code)][1], even better.

  1. I use that attribute for code that requires superuser rights, for instance ↩︎

2

On Linux, it's basically seccomp. It's not ideal (difficult to get all syscalls you need and none that could be abused), but you can set up listening during startup and then block open completely.