[Hamara-devel] The kernel of argument - an article on linux security, its reach

[shirish]

Hi all,

The one which I'm going to link is really longish so have something hot 
or cold and take time out as it's going to take quite some time to read it.

http://www.washingtonpost.com/sf/business/2015/11/05/net-of-insecurity-the-kernel-of-the-argument/

The great thing about the article is that people who deny or live in 
denial that GNU/Linux is big has been proved wrong.

As far as security on the kernel is concerned, I *think* the author got 
it right. A big part of the problem is the crazy way the kernel 
development works.

If you think of the kernel as an engine of the car (the analogy is apt 
as the kernel is as complex as a car/jet or whatever engine you think 
and does similar work,

Debian itself has been doing quite a bit of hardening, see

https://wiki.debian.org/Hardening

https://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags

And as can be seen one of the advocates is Kees Cook

https://www-s.acm.illinois.edu/conference/2014/speakers/keescook.html


-- 
Regards,
Shirish Agarwal,
Community Lead,
Hamaralinux.org