lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:   Wed, 22 Mar 2023 16:29:23 +0700
From:   Bagas Sanjaya <bagasdotme@...il.com>
To:     Shuah Khan <skhan@...uxfoundation.org>, corbet@....net
Cc:     kstewart@...uxfoundation.org, linux-doc@...r.kernel.org,
        linux-kernel@...r.kernel.org
Subject: Re: [PATCH] docs: add system-state document to admin-guide

On Tue, Mar 21, 2023 at 05:18:16PM -0600, Shuah Khan wrote:
> +scripts/checksyscalls.sh can be used to check if current architecture is
> +missing any function calls compared to i386.

i386 is the reference architecture for comparing syscalls, right?

> +This scripts parses Documentation/features to find the support status
> +information. It can be used to validate the contents of the files under
> +Documentation/features or simply list.::

"... to validate contents of Documentation/features files or simply list
them::"

> +Let's do one last sanity check on the system to see if the following two
> +command outputs match. If they don't examine your system closely. kernel
> +rootkits install their own ps, find, etc. utilities to mask their activity.
> +The outputs match on my system. Do they on yours?
> +
> +ps ax | wc -l
> +ls -d /proc/* | grep [0-9]|wc -l

The shell snippet above should be in a code block for consistency
with other snippets.

> +Linux kernel supports several hardening options to make system secure.
> +kconfig-hardened-check tool sanity checks kernel configuration for
> +security. You can checkout the latest::

"... If you don't have the tool handy, you can clone the repository::"

> + * https://docs.kernel.org/trace/index.html

Shouldn't the last ref be internal link (Documentation/trace/index.rst)?

Thanks.

-- 
An old man doll... just what I always wanted! - Clara

Download attachment "signature.asc" of type "application/pgp-signature" (229 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ