4 ms·
I've always been curious, is security something that's been thought of from the start or is this something you plan on tackling after it's "mature"?
by tmikaeld 6y ago
I've always been curious, is security something that's been thought of from the start or is this something you plan on tackling after it's "mature"?
- waddlesplash 6y agoIt definitely was not thought of from the start, no. We have already made significant improvements in the past few years in the security department, with NX bit (DEP), ASLR (including KASLR), W^X (kernel only for now), and SMAP/SMEP all now functional and enabled by default. However, there is still a long way to go. Not all syscalls do correct access checking (I started an audit here but I haven't finished it yet) and the GUI runs as uid 0 (you can run CLI apps and sign in via SSH as other users, though.) Slowly but surely...
- tmikaeld 6y agoI'm actually impressed that you've made strides with it thus far, I'm really looking forward to start using it as a daily driver for my laptop!