Skip to contentSkip to conversation

segoon's status report - #11 of 15

kernel-hardening Vasiliy Kulikov 1 participant 1 message Jul 25, 2011

lore
Share & tools
lore
#0 lore raw

Accomplishments:

* Posted v2 and v3 of USERCOPY RFC to LKML.
* Stated the GNU_STACK handling issue on k-h list.
* Got a new direction of work in GNU_STACK area (RHEL's exec shield implementation).
* Summarized all accomplishments of the GSoC and posted the list on k-h list.
* Built and posted a list of possibly dangerous kernel infoleaks.
* Reviewed PAX_MPROTECT feature and posted the summary to the list.
* Reviewed securelevel'ish Grsecurity restrictions and posted my thoughts on k-h list.
* Started to implement more finegranted HARDEN_PROC feature.
* Got a new task from Solar: investigate differences in base addresses for mmap areas in x86-32 and 32-bit tasks in x86-64.

Priorities:

* RLIMIT_NPROC discussion with upstream.
* USERCOPY discussion and elaboration.
* HARDEN_RPOC implementation.
* GNU_STACK issue investigation.
* Base lib address differences in x86-32 and 32-bit tasks in x86-64.

Signature · 1 line
Vasiliy