Re: where to start?

[Bryan Paxton <evil7@bellsouth.net>]

Totally agreed... Following bugs in other software and trying to trace
it back to the kernel is an awesome plan.

On Sat, 10 Jun 2000, you wrote:
> > 4) other, non-security bugs in the code .. no doubt we'll
> >    encounter these when we take a closer look at the code
> >    (also, these could be outside of the scope of this
> >    project ???)
> 
> I say these are in the scope of the project.
> 
> In OpenBSD they fix any bug they find and happen to fix
> security bugs by chance.  An example I have heard Theo speak
> about was an obscure combination of 5 minor bugs in lpd where
> by the time they were announced OpenBSD had squished some of
> them because they were bugs without noticing security implications.
> 
> 
> Kernel-audit:  discussion list for security and the linux kernel
> Archive:       http://mail.nl.linux.org/kernel-audit/
-- 
Bryan Paxton

"How should I know if it works? That's what beta testers are for. I
          only coded it."
 -- Linus Torvalds.

Kernel-audit:  discussion list for security and the linux kernel
Archive:       http://mail.nl.linux.org/kernel-audit/