6 ms·

> I'm sure they're using a stable branch and keeping up with security patches Surely you must be joking... The last kernel 2.6.x LTS version to be maintained i

by nils2014 7y ago

> I'm sure they're using a stable branch and keeping up with security patches Surely you must be joking... The last kernel 2.6.x LTS version to be maintained is 2.6.32.71, and its maintenance ended in March 2016 [1]. No Security patches were released for 2.6.x since then. [1] https://en.wikipedia.org/wiki/Linux_kernel_version_history#Releases_2.6.x.y https://en.wikipedia.org/wiki/Linux_kernel_version_history#R...

LinuxBender 7y ago
You are right, but AFAIK they are running CentOS and Redhat have been back-porting security and fixes to major bugs at least until recently. CentOS 6 is in extended support phase 2 [1] Hopefully they move to CentOS 8 soon. I have no idea how this is implemented or if that parrot module has a flashable firmware. It is interesting that they say there is no support for NX. CentOS 6 which is based on the 2.6 kernel does support it. [2] That is not to say that things were compiled with the right options. [1] - https://access.redhat.com/support/policy/updates/errata https://access.redhat.com/support/policy/updates/errata [2] - https://fedoraproject.or/wiki/Security_Features_Matrix https://fedoraproject.or/wiki/Security_Features_Matrix [ EDIT ] I was advised it is not running CentOS and that may be another system in the vehicle.
- nils2014 7y ago
  That's incorrect. The Parrot module has only 32MB RAM and is running a custom marvell buildroot-style linux distribution [1]. You're confusing the linux running on the information center, with the linux running on the Parrot board. [1] https://fccid.io/RKXFC6050W/Users-Manual/user-manual-1707044 https://fccid.io/RKXFC6050W/Users-Manual/user-manual-1707044
  - LinuxBender 7y ago
    Thankyou for the correction.
  - cjbprime 7y ago
    And the information center runs Ubuntu, not CentOS. If Parrot's still running 2.6.36, that's a really really bad sign for its security. You would have to predict more remote vulns on the way.
    - LinuxBender 7y ago
      Agreed. Having all these systems with all the different distros / builds of linux sounds very difficult to maintain. I am not comfortable with cars that are remotely accessible as it is, especially if they have any self driving abilities. Elon also wants to make brain implants for people that will be remotely accessible. I am probably thinking of the system that controls the driving, which I am 99% sure is CentOS 6. Reaching out to someone I know there.

LinuxBender 7y ago

You are right, but AFAIK they are running CentOS and Redhat have been back-porting security and fixes to major bugs at least until recently. CentOS 6 is in extended support phase 2 [1] Hopefully they move to CentOS 8 soon. I have no idea how this is implemented or if that parrot module has a flashable firmware. It is interesting that they say there is no support for NX. CentOS 6 which is based on the 2.6 kernel does support it. [2] That is not to say that things were compiled with the right options. [1] - https://access.redhat.com/support/policy/updates/errata https://access.redhat.com/support/policy/updates/errata [2] - https://fedoraproject.or/wiki/Security_Features_Matrix https://fedoraproject.or/wiki/Security_Features_Matrix [ EDIT ] I was advised it is not running CentOS and that may be another system in the vehicle.

nils2014 7y ago
That's incorrect. The Parrot module has only 32MB RAM and is running a custom marvell buildroot-style linux distribution [1]. You're confusing the linux running on the information center, with the linux running on the Parrot board. [1] https://fccid.io/RKXFC6050W/Users-Manual/user-manual-1707044 https://fccid.io/RKXFC6050W/Users-Manual/user-manual-1707044
- LinuxBender 7y ago
  Thankyou for the correction.
- cjbprime 7y ago
  And the information center runs Ubuntu, not CentOS. If Parrot's still running 2.6.36, that's a really really bad sign for its security. You would have to predict more remote vulns on the way.
  - LinuxBender 7y ago
    Agreed. Having all these systems with all the different distros / builds of linux sounds very difficult to maintain. I am not comfortable with cars that are remotely accessible as it is, especially if they have any self driving abilities. Elon also wants to make brain implants for people that will be remotely accessible. I am probably thinking of the system that controls the driving, which I am 99% sure is CentOS 6. Reaching out to someone I know there.