search

anthraxx / linux-hardened

Minimal supplement to upstream Kernel Self Protection Project changes. Features already provided by SELinux + Yama and archs other than multiarch arm64 / x86_64 aren't in scope. Only tags have stable history. Shared IRC channel with KSPP: irc.libera.chat #linux-hardening
Other
567 stars 56 forks source link

Where is your WIKI? #39

Open aprokopyev opened 4 years ago

aprokopyev commented 4 years ago

Please suggest where can I read a list of features of your patch?

Is this: https://wiki.archlinux.org/index.php/Security#Kernel_hardening

actual one?

Where is a complete list of kernel options introduced by your patch? Recommended settings for the most hardened config for a simple communication server without any need of Desktop GUI, skype, etc.

I need just a simple mail server (postfix, dovecot, rspamd), most likely on Parabola with OpenRC, but prefer 32 bit running in a full software emulated VM.

madaidan commented 4 years ago

There isn't really one. You should just look at the commit history.

seniorm0ment commented 4 years ago

I have been looking for the same, it would be very nice to have a wiki of kernel options introduced by the patch without needing to run through the commits.

tsautereau-anssi commented 4 years ago

Well I kind of wrote such a thing for the CLIP OS documentation here. I'll see with @anthraxx if we can start with adding that to a wiki.

Lelmister101 commented 2 years ago

If a wiki is made, it would also likely be worth it to add ways to contribute and wanted features. Maybe it could be kept in the “Wiki” tab in this repo?