kernel-hardening - Re: I'd like to contribute to this project.

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1f780e7e-5d9f-d39f-b454-06a4ffb2b42e@nod.at>
Date: Fri, 27 Jan 2017 20:05:42 +0100
From: Richard Weinberger <richard@....at>
To: Hoeun Ryu <hoeun.ryu@...il.com>, Kees Cook <keescook@...omium.org>
Cc: "kernel-hardening@...ts.openwall.com"
 <kernel-hardening@...ts.openwall.com>
Subject: Re: I'd like to contribute to this project.

Am 27.01.2017 um 20:03 schrieb Hoeun Ryu:
> On Fri, Jan 27, 2017 at 6:36 AM Kees Cook <keescook@...omium.org> wrote:
>>
>> On Thu, Jan 26, 2017 at 6:49 AM, Hoeun Ryu <hoeun.ryu@...il.com> wrote:
>>> On Thu, Jan 26, 2017 at 4:41 AM, Kees Cook <keescook@...omium.org> wrote:
>>>> On Wed, Jan 25, 2017 at 6:01 AM, Hoeun Ryu <hoeun.ryu@...il.com> wrote:
>>>>> Hi. I'm Hoeun Ryu.
>>>>
>>>> Hi! Nice to meet you!
>>>>
>>>>> I've been reading arm/arm64 and mm/fs kernel code for the last few years.
>>>>> I stumbled upon the wiki page for this project and found this project seems
>>>>> very interesting.
>>>>> I think I can start to contibute to this project from porting small parts of
>>>>> PAX/GRSEC features that you guys haven't worked on yet.
>>>>
>>>> Sure, that would be very welcome. Are there features you're especially
>>>> interested in?
>>>>
>>>
>>> I tried to find out what features PAX/GRKERNSEC provides reading
>>> grsecurity wiki pages and the patch file today.
>>> It might take a week or two to find adequate features for me to tackle.
>>> But my guess after few hours of a brief investigation is `Deter
>>> exploit bruteforcing (GRKERNSEC_BRUTE)`
>>> Do you think the feature is worth it to you guys ? If not, please
>>> recommend others.
>>
>> I'd really like to see this, yes. There have been attempts in the past
>> that got derailed. I strongly think it should be part of the kernel
>> (and not glibc, as got proposed):
>>
>> https://lkml.org/lkml/2014/12/24/306
>>
>> I think it's worth trying it again.
> 
> Ok. I will start to investigate the history of Richard's try for the
> feature and GRKERNSEC_BRUTE itself and how I can narrow the gap
> between the opinions.

Please go ahead. :-)
I simply didn't had the time to come up with another approach.

Thanks,
//richard

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.