github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2025-07-18 17:01:07 +00:00
Code Issues Projects Releases Wiki Activity
master
linuxkit/projects/kspp/README.md
Justin Cormack 1b9720a9eb Move roadmap to README where there is only one 
This way something comes up when you click on the project on
github, rather than having to hunt for something to explain the
project.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-06-12 11:44:29 +02:00

1.0 KiB
Raw Permalink Blame History

Kernel Self Protection Project (KSPP)

The Kernel Self Protection Project is a community effort to harden the upstream Linux kernel by eliminating classes of vulnerabilities.

Many similar protections have existed in other projects, but have yet to have been upstreamed. Since Moby is a consumer of the Linux kernel and aims to be the most secure distro it can be, it is in our maintainers' best interests to collaborate on upstream Linux security measures.

Roadmap

Near-term:

  • We've aligned our kernel_config and sysctl settings with the KSPP recommendations - we should continue to track these
    • Note: we check for these settings in our CI tests (see check_kernel_config.sh)
  • @tych0 is working on KSPP patches, which are submitted to the kernel hardening mailing list

Long-term:

  • Increase involvement in the project