Re: Hardening Linux conf

2018-09-03 Thread Bastian Blank
[replying to you also]

On Mon, Sep 03, 2018 at 12:48:53PM +0200, Tomas Bortoli wrote:
> It allows to quickly find weak spots in Linux configs. Running it against:
> https://salsa.debian.org/kernel-team/linux/blob/master/debian/config/config

This is not the config of the Debian kernel.  And if you have had a look
into it, you would have seen that it looks different from a normal linux
config file.

> That, AFAIK is the official config, gave:
> https://pastebin.com/0sctgpSz
> With many failed tests.

Please interpret the errors yourself.  A tool is only as good as the
person using it.

If you have specific questions, you can reach the kernel maintainers at
debian-ker...@lists.debian.org or by submitting a bug report against
src:linux.

> Is it possible to get some feedback from the people involved, regarding
> this issue?

There is no issue.  You compared something you can't compare.  You did
not see that it tells you that Ubuntu decided on this values, not
Debian.

Bastian

-- 
... The prejudices people feel about each other disappear when they get
to know each other.
-- Kirk, "Elaan of Troyius", stardate 4372.5



Hardening Linux conf

2018-09-03 Thread Tomas Bortoli
Hi,

I've recently discovered this interesting resource:
https://a13xp0p0v.github.io/2018/07/07/kconfig-hardened-check.html

It allows to quickly find weak spots in Linux configs. Running it against:
https://salsa.debian.org/kernel-team/linux/blob/master/debian/config/config

That, AFAIK is the official config, gave:
https://pastebin.com/0sctgpSz

With many failed tests.

Is it possible to get some feedback from the people involved, regarding
this issue?

Tomas