From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1JQrJ7-0001Ig-IR for garchives@archives.gentoo.org; Sun, 17 Feb 2008 21:44:21 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 9918AE03CD; Sun, 17 Feb 2008 21:43:36 +0000 (UTC) Received: from wa-out-1112.google.com (wa-out-1112.google.com [209.85.146.176]) by pigeon.gentoo.org (Postfix) with ESMTP id E4146E0058 for ; Sun, 17 Feb 2008 21:43:35 +0000 (UTC) Received: by wa-out-1112.google.com with SMTP id k34so2683944wah.10 for ; Sun, 17 Feb 2008 13:43:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=s0+yE1a/ML6dV1t/M7dlaOjZBp8gd0gBBZhBhfKYVYk=; b=UBzNG4Y6pbde/sltP2bTNYhsl9UJSGP4667FEW2/H9GCdjc5a0dJ8Ry4kw3CYafkGB8ATgfIJZLQXfDoMgTLPf1eDwoHJ/sZNtN7wXhqgaEpJwQyFiVcT02Uiy0ysKTv1HRC3YRUaY1PW7JmayNRfJZeSe94fJFVvMT0DWUkExk= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=Qc3nk2bPWUqr54vcFPzRGy90GQkw0fP3OfS41FmgImwcQh3VQgllkvz1VQ0vBjvSIWs6czFvZlKteu1pKyU2lTExBnhDljCyv12UsZRF2Rz4jHNR0b+33LByjeJn8ohrHzUi1nSiAhQuUz6aDsdFIXoZfihyd487ECdPeoaK8wg= Received: by 10.115.74.1 with SMTP id b1mr924746wal.93.1203284615504; Sun, 17 Feb 2008 13:43:35 -0800 (PST) Received: by 10.114.66.18 with HTTP; Sun, 17 Feb 2008 13:43:35 -0800 (PST) Message-ID: Date: Mon, 18 Feb 2008 05:43:35 +0800 From: "Eduardo Tongson" To: gentoo-security@lists.gentoo.org Subject: Re: [gentoo-security] Kernel Security + KISS In-Reply-To: <200802171846.01731.jaervosz@gentoo.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-security@lists.gentoo.org Reply-to: gentoo-security@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <200802171846.01731.jaervosz@gentoo.org> X-Archives-Salt: 175ed23f-b741-4350-b8ed-17d68146df05 X-Archives-Hash: cb2f03e459fea797defd2d02ba8b50a9 What specific kernel knowledge is needed to get a Kernel advisory up and running ? Ed On Feb 18, 2008 1:46 AM, Sune Kloppenborg Jeppesen wrote: > On Saturday 16 February 2008, Casey Link wrote: > > I understand the logic behind not including kernel vulnerabilities in > > regular GLSAs but in that thread > > an up and coming solution (KISS) was mentioned. That was back in 2005 > > and now according to the Gentoo Kernel Security sub-project page the > > project is stalled. Whatever happened to the KISS project? > I sadly died before going live and the original kernel developer left. > > > I think notifying users of relevant kernel vulnerabilities is > > important and I would like to help if possible. What is the current > > state of things regarding kernel vulnerability reporting? > I agree. However we need people with kernel knowledge and time to handle > security issues for all kernel sources. > > Anyone interested should mail security@gentoo.org. > > -- > Sune Kloppenborg Jeppesen > Gentoo Linux Security Team > > -- > gentoo-security@lists.gentoo.org mailing list > > -- gentoo-security@lists.gentoo.org mailing list