Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #5441 > unrolled thread
| Started by | Tomas Bortoli <tomasbortoli@gmail.com> |
|---|---|
| First post | 2018-09-03 13:10 +0200 |
| Last post | 2018-09-03 14:10 +0200 |
| Articles | 2 — 2 participants |
Back to article view | Back to linux.debian.security
Hardening Linux conf Tomas Bortoli <tomasbortoli@gmail.com> - 2018-09-03 13:10 +0200
Re: Hardening Linux conf Bastian Blank <waldi@debian.org> - 2018-09-03 14:10 +0200
| From | Tomas Bortoli <tomasbortoli@gmail.com> |
|---|---|
| Date | 2018-09-03 13:10 +0200 |
| Subject | Hardening Linux conf |
| Message-ID | <wtUU1-5HZ-5@gated-at.bofh.it> |
[Multipart message — attachments visible in raw view] — view raw
Hi, I've recently discovered this interesting resource: https://a13xp0p0v.github.io/2018/07/07/kconfig-hardened-check.html It allows to quickly find weak spots in Linux configs. Running it against: https://salsa.debian.org/kernel-team/linux/blob/master/debian/config/config That, AFAIK is the official config, gave: https://pastebin.com/0sctgpSz With many failed tests. Is it possible to get some feedback from the people involved, regarding this issue? Tomas
[toc] | [next] | [standalone]
| From | Bastian Blank <waldi@debian.org> |
|---|---|
| Date | 2018-09-03 14:10 +0200 |
| Message-ID | <wtVQ5-6gm-19@gated-at.bofh.it> |
| In reply to | #5441 |
[replying to you also] On Mon, Sep 03, 2018 at 12:48:53PM +0200, Tomas Bortoli wrote: > It allows to quickly find weak spots in Linux configs. Running it against: > https://salsa.debian.org/kernel-team/linux/blob/master/debian/config/config This is not the config of the Debian kernel. And if you have had a look into it, you would have seen that it looks different from a normal linux config file. > That, AFAIK is the official config, gave: > https://pastebin.com/0sctgpSz > With many failed tests. Please interpret the errors yourself. A tool is only as good as the person using it. If you have specific questions, you can reach the kernel maintainers at debian-kernel@lists.debian.org or by submitting a bug report against src:linux. > Is it possible to get some feedback from the people involved, regarding > this issue? There is no issue. You compared something you can't compare. You did not see that it tells you that Ubuntu decided on this values, not Debian. Bastian -- ... The prejudices people feel about each other disappear when they get to know each other. -- Kirk, "Elaan of Troyius", stardate 4372.5
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.security
csiph-web