Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Linux Kernel Security is Lacking
Jason Miller, 2005-02-02

Recent events have shown that the way security in the Linux kernel is handled is broken, and it needs to be fixed right now.

Comments Mode:
Linux Kernel Security is Lacking 2005-02-02
Anonymous (1 replies)
Linux Kernel Security is Lacking 2005-02-04
Anonymous (5 replies)
Linux Kernel Security is Lacking 2005-02-05
Anonymous
Linux Kernel Security is Lacking 2005-02-06
Anonymous
"The numbers" and (deliberate?) failure to undestand what linux is 2005-02-07
RedHat not Linux User. (1 replies)
Re: The "numbers" and (deliberate?) failure to undestand what linux is 2005-02-07
Jason V. Miller (Author) (1 replies)
Vendors and kernel security 2005-02-09
Anonymous
Linux Kernel Security is Lacking 2005-02-03
Anonymous (1 replies)
Linux Kernel Security is Lacking 2005-02-04
Jason V. Miller (Author)
Linux Kernel Security is Lacking 2005-02-03
Todd Knarr (1 replies)
Linux Kernel Security is Lacking 2005-02-04
Jason V. Miller (Author) (1 replies)
Linux Kernel Security is Lacking 2005-02-05
Todd Knarr (1 replies)
I hate to say it, but reporting this should be easy. First step is obviously to report it to the maker of your distribution, since they may have (almost certainly have) applied patches not in the general kernel. They'll report it further up the chain if appropriate. If you're using a vanilla kernel, a description of the bug and a request for the name/e-mail of the person responsible for that area on the LKML will yield results. No need to go into details and provide code at this point, but it's just another bug and it's not THAT hard to report bugs in the LKML.

Of course this isn't the way the makers of proprietary software do it, but then this isn't proprietary software. When in doubt, we just ask where to send a particular question and usually get an answer in short order.

As for e-mailing Linus, would you expect Bill Gates to respond to e-mail direct to him about bugs? My guess is you'd be waiting a long time for a reply.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/296/30365#30365
Linux Kernel Security is Lacking 2005-02-09
Joe Borsits (1 replies)
Linux Kernel Security is Lacking 2005-02-09
Todd Knarr (1 replies)
Linux Kernel Security is Lacking 2005-02-10
Joe Borsits
Linux Kernel Security is Lacking 2005-02-03
Anonymous (1 replies)
Linux Kernel Security is Lacking 2005-02-04
Jason V. Miller (Author) (1 replies)
Linux Kernel Security is Lacking 2005-02-05
RVGeerligs
Really? 2005-02-03
Anonymous
I eagerly await... 2005-02-03
Anonymous (5 replies)
I eagerly await... 2005-02-03
Anonymous
I eagerly await... 2005-02-03
Anonymous (2 replies)
I eagerly await... 2005-02-04
Anonymous
I eagerly await... 2005-02-07
Anonymous
I eagerly await... 2005-02-04
Anonymous
I eagerly await... 2005-02-04
Anonymous (1 replies)
I eagerly await... 2005-02-09
Anonymous
Re: I eagerly await... 2005-02-04
Anonymous (1 replies)
Re: I eagerly await... 2005-02-04
Jason V. Miller
Computer Security is Oxymoron - FYI reading here: 2005-02-03
Anonymous (1 replies)
Computer Security is Oxymoron No Longer 2005-02-07
Kernel hacker
So, what now about kernel security? 2005-02-03
Anonymous (2 replies)
So, what now about kernel security? 2005-02-04
Jason V. Miller (Author) (2 replies)
Linux Kernel Security is Lacking 2005-02-04
TJ (1 replies)
Linux Kernel Security is Lacking 2005-02-04
Keshav Jha
Linux Kernel Security is Lacking 2005-02-05
Anonymous
OpenBSD slogan 2005-02-06
Anonymous
Linux Kernel Security is Lacking 2005-02-08
Anonymous (1 replies)
Linux Kernel Security is Lacking 2005-02-09
Anonymous
Linux Kernel Security is Lacking 2005-02-09
Anonymous
Discussed on linux-kernel 2005-02-09
Anonymous
security@kernel.org 2005-02-09
Anonymous
Linux Kernel Security is Lacking 2005-02-09
Anonymous
Linux Kernel Security is Lacking 2005-02-09
Anonymous
Contact the module developer? 2005-02-09
Anonymous
Linux Kernel Security is Lacking 2005-02-09
Anonymous
Linux Kernel Security is Lacking 2005-02-10
Khawar Nehal







 

Privacy Statement
Copyright 2009, SecurityFocus