[gentoo-hardened] Hardened Roadmap

[gentoo-hardened] Hardened Roadmap

[Gustavo Adolfo Silva Ribeiro Felisberto]

Hello.

I am a Linux user since 1995 and a Gentoo user since February 2002. I have done a lot of work as a system administrator and have been devoting some time to more advanced security aspects such as kernel security and ACL systems.

I tried to find a roadmap of the gentoo hardened project but could not.

I wanted to now where the project is... where does it want to arrive... who needs help with what......

I am specially interested in grsecurity and it's acl system. What is the hardened idea? To focus on "server" software and produce acl's for ALL the server programs? Have the ebuild developers making acl's for the software they maintain (is this secure? are they security educated? )

I hope the work keeps being as good as it is now. And i hope i can help with what i know/can .

Gustavo Felisberto
aka HumpBack

--
gentoo-hardened@gentoo.org mailing list

Re: [gentoo-hardened] Hardened Roadmap

[Joshua Brindle]

>Hello.

Hi!

>I am a Linux user since 1995 and a Gentoo user since February 2002. I have done a lot of work as 
>a system administrator and have been devoting some time to more advanced security aspects 
>such as kernel security and ACL systems.
>
>I tried to find a roadmap of the gentoo hardened project but could not.

We are still a small team trying to take on a lot. Additionally most of us are in college and finals
are just around the corner (next week here). Since we are all very busy we haven't been
able to sit down and set some dates or deadlines. 

>I wanted to now where the project is... where does it want to arrive... who needs help with 
>what......

After finals we should expect that much more
will get done, especially on the documentation side. 

>I am specially interested in grsecurity and it's acl system. What is the hardened idea? To focus on 
>"server" software and produce acl's for ALL the server programs? Have the ebuild developers 
>making acl's for the software they maintain (is this secure? are they security educated? )
>
>I hope the work keeps being as good as it is now. And i hope i can help with what i know/can .

We are hoping to make acl's available to everyone, especially server users. We will 
probably come up with a baseline set of policies for all ACL/MAC implementations at
some point, and then strive to get not only the baseline set for all implementations
but also as many additional policies as possible. We are also still wresting with some
policy logistics (like transport and updating).

>Gustavo Felisberto
>aka HumpBack

Cheers

--
gentoo-hardened@gentoo.org mailing list