> Additionally, do people have suggestions for good security rules?
> We're looking to expand our security checkers. Right now we just have
> checkers that warn when:
Do you already have checks for signed/unsigned issues? Those often result
in security problems, although you may already be checking for them simply
for reliable-code purposes. ...Hm, looking at the archives, I see Chris
Evans responded about signedness issues when you asked last month :-P
You may want to check out and/or subscribe to the security-audit list; most
of the discussion is about userland security issues but kernel problems (or
potential ones) are discussed as well. We have archives of the list at:
http://marc.theaimsgroup.com/?l=linux-security-audit&r=1&w=2
And see http://www.linuxhelp.org/lsap.shtml for more info, subscribing,
etc.
-- Hank Leininger <hlein@progressive-comp.com> - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/