okular-mupdf-ng
This project hardens Linux document readers by sandboxing their most dangerous components, starting with Okular's document parser and renderer, to reduce the reader's attack surface.
What it addresses
The parser and renderer of document readers like Okular are the most dangerous attack surface, exposing users to exploits from malicious documents.
Shared over time
Each entry reflects what was shared on that date. Details may have changed since then.
okular-mupdf-ng
This project hardens Linux document readers by sandboxing their most dangerous components, starting with Okular's document parser and renderer, to reduce the reader's attack surface.
Problem: The parser and renderer of document readers like Okular are the most dangerous attack surface, exposing users to exploits from malicious documents.
Posted by @rzy · Original comment ↗
“I've been working on a project to reduce attack surface of Linux document readers, starting with Okular: https://github.com/l4rzy/okular-mupdf-ng The idea is to sandbox the most dangerous parts of it: The Document parser and renderer.”