[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: suggestion.

Marc Esipovich wrote:

> Here is a small list, please add.
> 
>   1.  The binary loaders, a,out, elf...
>   2.  In 2.[24].x kernels, the cap stuff. 
>   3.  proc filesystem.
>   4.  NET (ipv4 for now)
>   5.  Filesystem code, mostly DoS and data
>       corruption. this will require people
>       who know their way around filesystems,
>       not for the general auditing crowd.
>   6.  Stress testing the kernel in every
>       imaginable way is bound to find
>       *something*, be creative.

If we are not also auditing the tools that
process this code into objects and
executables, we're fooling ourselves about
kernel security.

Kernel-audit:  discussion list for security and the linux kernel
Archive:       http://mail.nl.linux.org/kernel-audit/