Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #53202

Debian live kernel patching infra

Show all headers | View raw

Hi,

Is anyone working on live kernel patching in Debian?

I'm a bit surprised to see so little public speak about such a nice
looking feature.

I think it would be a tremendous asset for Debian to be able to offer
live kernel updates through the security infrastructure.

I get the idea that the tools to patch a kernel are stabilizing.
To make it available to anyone the Debian security team would need to
prepare a patch for each of the previous kernels and have some
infrastructure to deliver it to end users.
As the patches are available to the team the challenge would be to get a
tool set for them to make it easy/manageable.

I assume that we could distribute the patches as a deb package. Maybe
one <current name>-livepatches package which gets updated after each CVE.

I'd like to get the ball rolling on this.

I personally would be willing to help test this and donate some cash to get
this for the community.
I imagine that more businesses would be willing to chip in.

-- 

Met vriendelijke groet / Regards,

Herman van Rink
Initfour websolutions

Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Debian live kernel patching infra Herman van Rink <rink@initfour.nl> - 2016-03-14 15:00 +0100
  Re: Debian live kernel patching infra Ben Hutchings <ben@decadent.org.uk> - 2016-04-12 17:00 +0200
    Re: Debian live kernel patching infra Herman van Rink <rink@initfour.nl> - 2016-04-19 09:20 +0200

csiph-web