4 ms·
> Most of Linux isn't reviewed by security experts either Where are you getting your information from?
by techntoke 7y ago
> Most of Linux isn't reviewed by security experts either
Where are you getting your information from?
- deleted 7y ago[deleted]
- pjmlp 7y agoFor starters from Google, with their Linux Kernel Self Preservation project, where an endless list of exploits have been fixed, starting by removal from all VLAs in the kernel source. Going forward, all Android devices on ARM are required to use ARM MTE, because the only way to keep C develoeprs on track is to have hardware control their pointer usage. https://security.googleblog.com/2019/08/adopting-arm-memory-tagging-extension.html https://security.googleblog.com/2019/08/adopting-arm-memory-... And as of NDK 21, Fortify is enabled by default, https://android-developers.googleblog.com/2019/10/introducing-ndk-r21-our-first-long-term.html https://android-developers.googleblog.com/2019/10/introducin... Given that Linux kernel downstream on Qubes , ChromeOS and Android are the only ones with all of the security counter measured turned on, that speaks a lot for the standard Linux kernel on random distribution X.