[ubuntu-hardened] /dev/mem restrictions kernel patch

Ben Collins ben.collins at ubuntu.com
Thu Jan 31 14:06:59 GMT 2008


On Wed, 2008-01-30 at 19:49 -0800, Kees Cook wrote:
> On Wed, Jan 30, 2008 at 06:39:23PM -0800, Jeff Schroeder wrote:
> > Arjan van de Ven just posted a kernel patch for /dev/mem security that
> > looks interesting. It doesn't appear to be applied to ubuntu-hardy.git
> > or ubuntu-hardy-kees.git so I'm mentioning it now.
> 
> Oh! This looks good.  Arjan had mentioned these protections to me a
> while back, so I'm glad to see it has finally hit lkml.
> 
> Unless someone on the kernel-team beats me to it, I'll put this into my
> tree for testing when I get back from vacation next week.  :)

We had a similar patch before back in dapper, but the patch had major
conflicts past that, so was removed. Very useful though. I'd love to
have it back in there.

-- 
Ubuntu   : http://www.ubuntu.com/
Linux1394: http://wiki.linux1394.org/
SwissDisk: http://www.swissdisk.com/




More information about the ubuntu-hardened mailing list