full-disclosure - linux bugs (survival stories)?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <8e5ffb56050411232168b175ca@mail.gmail.com>
Date: Tue Apr 12 07:22:09 2005
From: gautam.bipin at gmail.com (Bipin Gautam)
Subject: linux bugs (survival stories)?

hi list,
we have had a series of linux(kernel) bugs reported lately... they
were own unique in nature. (o; ( As i haven't gone through each and
every to verify its types) On the other hand we have had products like
 stack guard, lib safe, grsecurity.net, se-linux bla..bla...blah! But,
still i don't hear any success stories i mean, an analytical report
which says....... using *** patch from the *** product to my default
kernel source from kernel.org made my machine immune to  * (a
particular bug)  targeted to my verson of kernel. We all know the
product isn't a myth and with a properly hardened OS it could save
your day....

BUT i was woundering, to what extent adding these extra security
measures are effective against the real attacks & bugs discovered in
the kernel. i hope you got my point. (Though, se-linux got
features..... lets me not re-describe it all rite now)

regards,
Bipin Gautam
http://bipin.sosvulnerable.net/