lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <2024111938-anointer-kooky-d4f9@gregkh>
Date: Tue, 19 Nov 2024 02:09:14 +0100
From: Greg KH <gregkh@...uxfoundation.org>
To: Pasha Tatashin <pasha.tatashin@...een.com>
Cc: Roman Gushchin <roman.gushchin@...ux.dev>, linux-kernel@...r.kernel.org,
	linux-mm@...ck.org, linux-doc@...r.kernel.org,
	linux-fsdevel@...r.kernel.org, cgroups@...r.kernel.org,
	linux-kselftest@...r.kernel.org, akpm@...ux-foundation.org,
	corbet@....net, derek.kiernan@....com, dragan.cvetic@....com,
	arnd@...db.de, viro@...iv.linux.org.uk, brauner@...nel.org,
	jack@...e.cz, tj@...nel.org, hannes@...xchg.org, mhocko@...nel.org,
	shakeel.butt@...ux.dev, muchun.song@...ux.dev,
	Liam.Howlett@...cle.com, lorenzo.stoakes@...cle.com, vbabka@...e.cz,
	jannh@...gle.com, shuah@...nel.org, vegard.nossum@...cle.com,
	vattunuru@...vell.com, schalla@...vell.com, david@...hat.com,
	willy@...radead.org, osalvador@...e.de, usama.anjum@...labora.com,
	andrii@...nel.org, ryan.roberts@....com, peterx@...hat.com,
	oleg@...hat.com, tandersen@...flix.com, rientjes@...gle.com,
	gthelen@...gle.com
Subject: Re: [RFCv1 0/6] Page Detective

On Mon, Nov 18, 2024 at 05:08:42PM -0500, Pasha Tatashin wrote:
> Additionally, using crash/drgn is not feasible for us at this time, it
> requires keeping external tools on our hosts, also it requires
> approval and a security review for each script before deployment in
> our fleet.

So it's ok to add a totally insecure kernel feature to your fleet
instead?  You might want to reconsider that policy decision :)

good luck!

greg k-h

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ