Grsec 2.1
Nadnevak 07.01.2005 20:06:17 | Tema: Sigurnost sustava
| Popularni grsecurity.net izdao je novu verziju grseca - 2.1. Na http://grsecurity.net možete naći download linkove za novi grsec i fixeve za nedavne rupe u kernelu. Fix ide samo na kernel koji je već patchan grsecom.
Prilikom objave izdanja, na bugtraqu se mogo pročitati mail u čijem sadržaju je bio i tekst:
"I'd really like to know what's being done about this pitiful trend of Linux security, where it's 10x as easy to find a vulnerability in the kernel than it is in any app on the system, where isec releases at least one critical vulnerability for each kernel version. I don't see that the 2.6 development model is doing anything to help this (as the spectrum of these vulnerabilities demonstrate), by throwing experimental code into the kernel and claiming it to be "stable". Hopefully now these vulnerabilities will be fixed in a timely manner."
Osim toga, objavio je rupe i exploite koji omogućuju DDoS. Sprema li nam se 2.6.11 ili je vrijeme da se malo više uključe glave u razvoju kernela?
|
|