Linux Kernel Security Done Right

[Tolkem]

Hi everyone! Hope you're all having a nice life!
I just wanted to share this post https://security.googleblog.com/2021/08/linux-kernel-security-done-right.html where Kees Cook, a software engineer, who is member of Google open source security team, describes his vision for approaches to assuring kernel security in a more collaborative way.
An excerpt:

The statistics of tracking and fixing distinct bugs are sobering. The stable kernel releases ("bug fixes only") each contain close to 100 new fixes per week. Faced with this high rate of change, a vendor can choose to ignore all the fixes, pick out only "important" fixes, or face the daunting task of taking everything.

I found it interesting to read.

 

[dcbrown73]

Oh yeah, I saw that a couple of weeks ago. Good stuff.

If you're interested in kernel exploitation, have a gander here: https://lkmidas.github.io/posts/20210128-linux-kernel-pwn-part-2/