From mboxrd@z Thu Jan 1 00:00:00 1970
Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org)
by finch.gentoo.org with esmtp (Exim 4.60)
(envelope-from <gentoo-security+bounces-816-garchives=archives.gentoo.org@lists.gentoo.org>)
id 1JQrJ7-0001Ig-IR
for garchives@archives.gentoo.org; Sun, 17 Feb 2008 21:44:21 +0000
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
by pigeon.gentoo.org (Postfix) with SMTP id 9918AE03CD;
Sun, 17 Feb 2008 21:43:36 +0000 (UTC)
Received: from wa-out-1112.google.com (wa-out-1112.google.com [209.85.146.176])
by pigeon.gentoo.org (Postfix) with ESMTP id E4146E0058
for <gentoo-security@lists.gentoo.org>; Sun, 17 Feb 2008 21:43:35 +0000 (UTC)
Received: by wa-out-1112.google.com with SMTP id k34so2683944wah.10
for <gentoo-security@lists.gentoo.org>; Sun, 17 Feb 2008 13:43:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
bh=s0+yE1a/ML6dV1t/M7dlaOjZBp8gd0gBBZhBhfKYVYk=;
b=UBzNG4Y6pbde/sltP2bTNYhsl9UJSGP4667FEW2/H9GCdjc5a0dJ8Ry4kw3CYafkGB8ATgfIJZLQXfDoMgTLPf1eDwoHJ/sZNtN7wXhqgaEpJwQyFiVcT02Uiy0ysKTv1HRC3YRUaY1PW7JmayNRfJZeSe94fJFVvMT0DWUkExk=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
b=Qc3nk2bPWUqr54vcFPzRGy90GQkw0fP3OfS41FmgImwcQh3VQgllkvz1VQ0vBjvSIWs6czFvZlKteu1pKyU2lTExBnhDljCyv12UsZRF2Rz4jHNR0b+33LByjeJn8ohrHzUi1nSiAhQuUz6aDsdFIXoZfihyd487ECdPeoaK8wg=
Received: by 10.115.74.1 with SMTP id b1mr924746wal.93.1203284615504;
Sun, 17 Feb 2008 13:43:35 -0800 (PST)
Received: by 10.114.66.18 with HTTP; Sun, 17 Feb 2008 13:43:35 -0800 (PST)
Message-ID: <b18fbe3c0802171343t2c6999c2l3a7efe57f9fd589f@mail.gmail.com>
Date: Mon, 18 Feb 2008 05:43:35 +0800
From: "Eduardo Tongson" <propolice@gmail.com>
To: gentoo-security@lists.gentoo.org
Subject: Re: [gentoo-security] Kernel Security + KISS
In-Reply-To: <200802171846.01731.jaervosz@gentoo.org>
Precedence: bulk
List-Post: <mailto:gentoo-security@lists.gentoo.org>
List-Help: <mailto:gentoo-security+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-security+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-security+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-security.gentoo.org>
X-BeenThere: gentoo-security@lists.gentoo.org
Reply-to: gentoo-security@lists.gentoo.org
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <fb3727060802161457x30472ff2v970bd41902bc8de2@mail.gmail.com>
<200802171846.01731.jaervosz@gentoo.org>
X-Archives-Salt: 175ed23f-b741-4350-b8ed-17d68146df05
X-Archives-Hash: cb2f03e459fea797defd2d02ba8b50a9
What specific kernel knowledge is needed to get a Kernel advisory up
and running ?
Ed
On Feb 18, 2008 1:46 AM, Sune Kloppenborg Jeppesen <jaervosz@gentoo.org> wrote:
> On Saturday 16 February 2008, Casey Link wrote:
> > I understand the logic behind not including kernel vulnerabilities in
> > regular GLSAs but in that thread
> > an up and coming solution (KISS) was mentioned. That was back in 2005
> > and now according to the Gentoo Kernel Security sub-project page the
> > project is stalled. Whatever happened to the KISS project?
> I sadly died before going live and the original kernel developer left.
>
> > I think notifying users of relevant kernel vulnerabilities is
> > important and I would like to help if possible. What is the current
> > state of things regarding kernel vulnerability reporting?
> I agree. However we need people with kernel knowledge and time to handle
> security issues for all kernel sources.
>
> Anyone interested should mail security@gentoo.org.
>
> --
> Sune Kloppenborg Jeppesen
> Gentoo Linux Security Team
>
> --
> gentoo-security@lists.gentoo.org mailing list
>
>
--
gentoo-security@lists.gentoo.org mailing list