v1.10.10
ToaruOS v1.10.10
What's New in v1.10.10?
Some security issues have been addressed to prevent a set of published exploits from remaining effective. Bim, ToaruOS's native text editor, has been updated to the latest build which adds several new features.
What is ToaruOS?
ToaruOS is a hobbyist, educational operating system for x86 PCs, focused primarily on use in virtual machines. It provides a Unix-like environment, complete with a graphical desktop interface, shared libraries, feature-rich terminal emulator, and support for running Python 3.6, GCC, and several other ports. The core of ToaruOS, provided by the CD images in this release, is built completely from scratch. The bootloader, kernel, drivers, C standard library, and userspace applications are all original software created by the authors, as are the graphical assets.
Who wrote ToaruOS?
ToaruOS is primarily written by a single maintainer, with several contributions from others. A complete list of contributors is available from AUTHORS.
Running ToaruOS
It is recommended that you run ToaruOS in a virtual machine / emulator, for maximum compatibility. ToaruOS's driver support is limited, and running on real "bare metal", while possible, does not provide the most complete experience of the OS's capabilities except on very particular hardware. ToaruOS is regularly tested in VirtualBox, QEMU, and VMWare Player, and can be successfully booted (with poor performance) in Bochs. ToaruOS is intended to run from a live CD, though it is possible to install to a hard disk. Additional details on running ToaruOS in different virtual machines is available from the README.
Changelog
pex
: Deal with some unprotectedsprintf
s into small buffers to avoid buffer overflows.kernel
: Add bounds check toTOARU_SYS_FUNC_SETHEAP
.ld.so
: ignoreLD_LIBRARY_PATH
onsuid
binaries.bim
: Updated to v1.4.5, which has many new features including a completely rewritten syntax highlighting engine, split views, current-line highlighting, and column selection and insertion.
Known Issues
- Several utilities are missing functionality.
- The libc's implementation of
scanf
is incredibly incomplete. - There are many known security issues with ToaruOS. You should not use ToaruOS in a production environment - it is a hobby project, not a production operating system. If you find security issues in ToaruOS and would like to responsibly report them, please file a regular issue report here on GitHub.