segoon's status report - #6 of 15
Accomplishments:
* Implemented and tested HARDEN_SHM.
* Implemented HARDEN_VM86, spotted an analogy with seccomp v2.
* Got an information from LKML that procfs patch is incomplete in sense of taskstats and proc connector. Heavily reworked implementation, removed hidepid=2. Sent a ptrace part of the patch to LKML.
* While observing taskstats code, fixed local DoS.
* Sent a comment about RLIMIT_NPROC.
* Started to read Intel Architecture Developer's Manual to review/implement full kernel RO/NX.
Priorities:
* Continue to discuss everything with upstream.
* Push/discuss pending patches to LKML.
* Overview PaX features, determine what parts of it are acceptable for upstream.
Signature · 1 line
Vasiliy