welcome

Hi,

This is our new mailing list for Linux kernel security hardening topics.

The intent is to use it to discuss proposed changes to the Linux kernel before possibly bringing them to LKML, as well as to CC it on relevant LKML threads.

We started some discussions of this nature on the owl-dev list. We need to bring them in here, perhaps with some over-quoting of or references to the initial messages (archive URLs are OK).

It is also OK to discuss hardening changes that are not meant for upstream (perhaps because we really don't expect them to be accepted). These may find their place in distro patches, in grsecurity, etc.

Our primary focus this summer should be on getting patches submitted to LKML, though. This is part of Vasiliy's GSoC project.

Here's some initial info:

GSoC: overview of grsecurity and -ow patches:
http://www.openwall.com/lists/owl-dev/2011/04/23/1

https://wiki.ubuntu.com/SecurityTeam/Roadmap/KernelHardening

Vasiliy's report #1:
http://www.openwall.com/lists/owl-dev/2011/05/18/1
(and lots of further messages in that thread - click "thread-next")

Vasiliy's report #2:
http://www.openwall.com/lists/owl-dev/2011/05/25/1

Vasiliy's report #3:
http://www.openwall.com/lists/owl-dev/2011/05/31/3

procfs mount options:
http://www.openwall.com/lists/owl-dev/2011/06/03/3

Let's start.

Alexander