Meson Internal Audit 1 Checklist

[Mikerah]

Checklist to help discuss what needs to be considered for auditing Meson.
Current list:

• : Check and Update Dependencies #126
• : Check logs for info leaks #128
• : Ensure that installation doesn’t escalate privileges  #129
• : Check for Time of check and time of use bugs #130
• : Check input and output sanitization #131
• : Check that Prometheus and Grafana ports are not easily accessible to an attacker #132
• : Check for the usual cryptography bugs #133
• : Check container configurations #134
• : Check for signature validation #138

[Mikerah]

For the fuzzing task, we will leave it as its own ongoing issue due to how long it'll take. As such, as of today (Oct 3, 2022), the only outstanding task is #133.