[kernel-hardening] welcome

[kernel-hardening] welcome

[Solar Designer]

Hi,

This is our new mailing list for Linux kernel security hardening topics.

The intent is to use it to discuss proposed changes to the Linux kernel
before possibly bringing them to LKML, as well as to CC it on relevant
LKML threads.

We started some discussions of this nature on the owl-dev list.  We need
to bring them in here, perhaps with some over-quoting of or references
to the initial messages (archive URLs are OK).

It is also OK to discuss hardening changes that are not meant for
upstream (perhaps because we really don't expect them to be accepted).
These may find their place in distro patches, in grsecurity, etc.

Our primary focus this summer should be on getting patches submitted to
LKML, though.  This is part of Vasiliy's GSoC project.

Here's some initial info:

GSoC: overview of grsecurity and -ow patches:
http://www.openwall.com/lists/owl-dev/2011/04/23/1

https://wiki.ubuntu.com/SecurityTeam/Roadmap/KernelHardening

Vasiliy's report #1:
http://www.openwall.com/lists/owl-dev/2011/05/18/1
(and lots of further messages in that thread - click "thread-next")

Vasiliy's report #2:
http://www.openwall.com/lists/owl-dev/2011/05/25/1

Vasiliy's report #3:
http://www.openwall.com/lists/owl-dev/2011/05/31/3

procfs mount options:
http://www.openwall.com/lists/owl-dev/2011/06/03/3

Let's start.

Alexander