[Commotion-dev] security hardening for olsrd: new Debian/Ubuntu builds to test

[Dan Staples]

Hi .hc,

Sorry for the long delay...I got busy with some other tasks and this 
dropped off my radar.  We were able to test the new builds today, and 
they seem to work fine, no problems.  We were able to mesh just fine 
with our existing Commotion mesh network, though we weren't able to 
test multi-hop since we would have to spread out pretty far in order to 
get out of single-hop range of each other.

Dan

On Fri 05 Oct 2012 03:08:01 PM EDT, Hans-Christoph Steiner wrote:
>
> The first thing is just to make sure it works properly with any
> configurations that you normally use.  Then, depending on any other
> skills you might have, it would be awesome if someone tried to break it
> and let us know what the exploits are. :-D
>
> .hc
>
> On 10/05/2012 12:25 PM, Dan Staples wrote:
>> I would be glad to help test this.  Is there any particular testing
>> feedback that would be helpful for you?
>>
>> Dan
>>
>> On Thu 04 Oct 2012 10:34:08 AM EDT, Hans-Christoph Steiner wrote:
>>>
>>> I've been working to get olsrd to pass the Debian 'hardening-check' and
>>> incorporate all of the changes into the official Debian package.  I have
>>> a test version that is working for me.  Now I'd love for others to test it.
>>>
>>> There are two way to get the packages, the Guardian Project Commotion PPA:
>>>
>>>   sudo add-apt-repository ppa:guardianproject/commotion
>>> or
>>>   https://launchpad.net/~guardianproject/+archive/ppa
>>>
>>> And the Debian experimental package:
>>>
>>>   http://packages.debian.org/experimental/olsrd
>>>
>>> Since olsrd runs as root, its important that it is secure and hard to
>>> exploit.  This is especially important as people install olsrd on
>>> their own laptops and Android phones, where all sorts of sensitive data
>>> is stored.
>>>
>>> .hc
>>> _______________________________________________
>>> Commotion-dev mailing list
>>> Commotion-dev at lists.chambana.net
>>> http://lists.chambana.net/mailman/listinfo/commotion-dev
>>
>> --
>> Dan Staples
>> Program Associate, Open Technology Institute
>> New America Foundation
>> _______________________________________________
>> Commotion-dev mailing list
>> Commotion-dev at lists.chambana.net
>> http://lists.chambana.net/mailman/listinfo/commotion-dev
>>
> _______________________________________________
> Commotion-dev mailing list
> Commotion-dev at lists.chambana.net
> http://lists.chambana.net/mailman/listinfo/commotion-dev