Kernel security: beyond bug fixing

Posted Oct 29, 2015 18:24 UTC (Thu) by minipli (guest, #69735)
Parent article: Kernel security: beyond bug fixing

The proposed mitigation list reads like an incomplete feature set description of the PaX/grsecurity patches.
It's sad, neither Kees nor Jon mentioned the origin of those ideas.

Kernel security: beyond bug fixing

Posted Oct 30, 2015 0:10 UTC (Fri) by corbet (editor, #1) [Link]

Kees did not mention those patches in this session, though they were discussed in other settings (writeups to come). It looks like there will be yet another attempt to go through those patches and upstream that which can be upstreamed. There is also a lot of interest in looking at their GCC extensions and seeing if they can be worked into the normal development process.

Kernel security: beyond bug fixing

Posted Oct 30, 2015 18:13 UTC (Fri) by mricon (subscriber, #59252) [Link]

https://twitter.com/kees_cook/status/658973606743949312