Skip to contentSkip to conversation

segoon's status report - #6 of 15

kernel-hardening Vasiliy Kulikov 1 participant 1 message Jun 22, 2011

lore
Share & tools
lore
#0 lore raw

Accomplishments:

* Implemented and tested HARDEN_SHM.
* Implemented HARDEN_VM86, spotted an analogy with seccomp v2.
* Got an information from LKML that procfs patch is incomplete in sense of taskstats and proc connector. Heavily reworked implementation, removed hidepid=2. Sent a ptrace part of the patch to LKML.
* While observing taskstats code, fixed local DoS.
* Sent a comment about RLIMIT_NPROC.
* Started to read Intel Architecture Developer's Manual to review/implement full kernel RO/NX.

Priorities:

* Continue to discuss everything with upstream.
* Push/discuss pending patches to LKML.
* Overview PaX features, determine what parts of it are acceptable for upstream.

Signature · 1 line
Vasiliy