* [kernel-hardening] segoon's status report - #6 of 15
@ 2011-06-22 19:28 Vasiliy Kulikov
0 siblings, 0 replies; only message in thread
From: Vasiliy Kulikov @ 2011-06-22 19:28 UTC (permalink / raw)
To: kernel-hardening
Accomplishments:
* Implemented and tested HARDEN_SHM.
* Implemented HARDEN_VM86, spotted an analogy with seccomp v2.
* Got an information from LKML that procfs patch is incomplete in sense of
taskstats and proc connector. Heavily reworked implementation,
removed hidepid=2. Sent a ptrace part of the patch to LKML.
* While observing taskstats code, fixed local DoS.
* Sent a comment about RLIMIT_NPROC.
* Started to read Intel Architecture Developer's Manual to
review/implement full kernel RO/NX.
Priorities:
* Continue to discuss everything with upstream.
* Push/discuss pending patches to LKML.
* Overview PaX features, determine what parts of it are acceptable for
upstream.
--
Vasiliy
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2011-06-22 19:28 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-06-22 19:28 [kernel-hardening] segoon's status report - #6 of 15 Vasiliy Kulikov
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox