[Commotion-dev] security hardening for olsrd: new Debian/Ubuntu builds to test

[Hans-Christoph Steiner]

The first thing is just to make sure it works properly with any
configurations that you normally use.  Then, depending on any other
skills you might have, it would be awesome if someone tried to break it
and let us know what the exploits are. :-D

.hc

On 10/05/2012 12:25 PM, Dan Staples wrote:
> I would be glad to help test this.  Is there any particular testing 
> feedback that would be helpful for you?
> 
> Dan
> 
> On Thu 04 Oct 2012 10:34:08 AM EDT, Hans-Christoph Steiner wrote:
>>
>> I've been working to get olsrd to pass the Debian 'hardening-check' and
>> incorporate all of the changes into the official Debian package.  I have
>> a test version that is working for me.  Now I'd love for others to test it.
>>
>> There are two way to get the packages, the Guardian Project Commotion PPA:
>>
>>   sudo add-apt-repository ppa:guardianproject/commotion
>> or
>>   https://launchpad.net/~guardianproject/+archive/ppa
>>
>> And the Debian experimental package:
>>
>>   http://packages.debian.org/experimental/olsrd
>>
>> Since olsrd runs as root, its important that it is secure and hard to
>> exploit.  This is especially important as people install olsrd on
>> their own laptops and Android phones, where all sorts of sensitive data
>> is stored.
>>
>> .hc
>> _______________________________________________
>> Commotion-dev mailing list
>> Commotion-dev at lists.chambana.net
>> http://lists.chambana.net/mailman/listinfo/commotion-dev
> 
> --
> Dan Staples
> Program Associate, Open Technology Institute
> New America Foundation
> _______________________________________________
> Commotion-dev mailing list
> Commotion-dev at lists.chambana.net
> http://lists.chambana.net/mailman/listinfo/commotion-dev
>