Re: 2.4-WOLK4.16 / 2.2-WOLK2.0

On Fri, Sep 03, 2004 at 10:01:11AM +0200, Primero wrote:

> >I can share the source and/or patches (also broken out) if anyone is
> >interested.
> >
> >The /proc hardening stuff is pepped up a bit since my last attempt; the =
gid
> >is no longer hardcoded, and the default gid of entries like loadavg and=
=20
> >sys/
> >can also be configured. It still can't be turned completely off though.
> i'm really interested ... where can i find the broken out patchset ?

http://chardonnay.math.bme.hu/~korn/kernel/2.6.8.1-ak1/

Apply in alphabetical order.

This collection of patches is, unlike WOLK, unsupported. My only purpose is
to build a kernel that I can use. I am both unable and unwilling to fix bugs
that don't affect me or add features I don't need (I will accept fixes and
additions from others though).

There is no 'release cycle'. I may add new patches later or do something
similar for a newer kernel, but don't depend on it.

To put it simply: this 'patchset' is not a 'project' in the sense WOLK is
one. It's just a heap of patches that I use.

However, if anyone else finds them useful, I'm all the more happy. :)

Good luck

Andras

Ps. note that if you use any kernel between 2.5.40 and 2.6.8, you are
vulnerable to a local attack where any user can change the modes and owners
of any non-PID entry on procfs, thereby circumventing access control on
entries that only rely on filesystem DAC for protection. I haven't seen this
publicized widely...

--=20
                 Andras Korn <korn at chardonnay.math.bme.hu>
                 <http://chardonnay.math.bme.hu/~korn/>	QOTD:
              A program is used to turn data into error messages.


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
WOLK - Working Overloaded Linux Kernel
[email protected]
https://lists.sourceforge.net/lists/listinfo/wolk-devel