Hardening Linux conf

From	Tomas Bortoli <tomasbortoli@gmail.com>
Newsgroups	linux.debian.security
Subject	Hardening Linux conf
Date	2018-09-03 13:10 +0200
Message-ID	<wtUU1-5HZ-5@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Hi,

I've recently discovered this interesting resource:
https://a13xp0p0v.github.io/2018/07/07/kconfig-hardened-check.html

It allows to quickly find weak spots in Linux configs. Running it against:
https://salsa.debian.org/kernel-team/linux/blob/master/debian/config/config

That, AFAIK is the official config, gave:
https://pastebin.com/0sctgpSz

With many failed tests.

Is it possible to get some feedback from the people involved, regarding
this issue?

Tomas

Back to linux.debian.security | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Hardening Linux conf Tomas Bortoli <tomasbortoli@gmail.com> - 2018-09-03 13:10 +0200
  Re: Hardening Linux conf Bastian Blank <waldi@debian.org> - 2018-09-03 14:10 +0200

csiph-web