Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Container Image: Revisit Rust file type detection libraries #26

Open
yveszoundi opened this issue Dec 18, 2022 · 0 comments
Open

Container Image: Revisit Rust file type detection libraries #26

yveszoundi opened this issue Dec 18, 2022 · 0 comments
Labels
future Maybe in the future research Research activities

Comments

@yveszoundi
Copy link
Member

yveszoundi commented Dec 18, 2022

Background

Entrusted has implemented its own file type detection business logic

  • This is based on magic bytes and doesn't rely on file name extensions or whatsoever
  • It is not a robust implementation, but an acceptable one based on the time spent and the "value delivered to the people"
  • No "great" libraries were found at the time (some libmagic bindings, few pure Rust libraries, etc.)

The libraries that we care about need to perform mime detection based on file bytes rather than relying on file extensions.

Objectives

  • Assess if we can use a more robust mime type detection library in the sandbox container image
  • See if we can detect many more file types
    • In theory we can support at least all documents that LibreOffice can open
    • There are also few more image formats that could be supported
@yveszoundi yveszoundi added the research Research activities label Dec 18, 2022
@yveszoundi yveszoundi changed the title Research: Revisit Rust file detection libraries Research: Revisit Rust file type detection libraries Dec 24, 2022
@yveszoundi yveszoundi changed the title Research: Revisit Rust file type detection libraries Container Image: Revisit Rust file type detection libraries Dec 24, 2022
@yveszoundi yveszoundi added the future Maybe in the future label Jul 31, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
future Maybe in the future research Research activities
Projects
None yet
Development

No branches or pull requests

1 participant