diff options
| author | Yves-Alexis Perez <corsac@debian.org> | 2013-12-04 12:04:58 +0000 |
|---|---|---|
| committer | Yves-Alexis Perez <corsac@debian.org> | 2013-12-04 12:04:58 +0000 |
| commit | 7dd361044771451cccedb65653836536160a52b3 (patch) | |
| tree | bd299c3769d320a231b84139169c790edfffdb3b /org/agenda-2014.txt | |
| parent | ce1f2e912dfded6ce128a9cdbc45ed1df55ffe87 (diff) | |
make a whole section for distribution hardening
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@24573 e39458fd-73e7-0310-bf30-c45bca0a0e42
Diffstat (limited to 'org/agenda-2014.txt')
| -rw-r--r-- | org/agenda-2014.txt | 19 |
1 files changed, 15 insertions, 4 deletions
diff --git a/org/agenda-2014.txt b/org/agenda-2014.txt index 269f1e4b8a..703a13cf60 100644 --- a/org/agenda-2014.txt +++ b/org/agenda-2014.txt @@ -62,10 +62,21 @@ Others - Compile a list of test instructions for key packages -- distribution hardening (hardening flags, mount flags, default open ports, - kernel hardening, heap protection, reducing the attack surfase, etc.), - planning for release goal speedup? - Adding new flags to dpkg-buildflags? (-fstack-protector-strong, others?) +Distribution hardening +====================== + +- hardening build flags: + - release goal status + - PIC/PIE situation + - adding new flags to dpkg-buildflags? (-fstack-protector-strong, others?) + - planning for release goal speedup? [corsac: what does it means?] + +- mount flags and default partitioning + +- default open ports + +- kernel hardening: memory protections (heap/stack/...), reducing the attack surface + LTS === |