Kernel Self Protection Project - Revision history

KeesCook: Replaced content with "This wiki has moved to the [https://kspp.github.io/ KSPP project page]"

2024-07-04T20:08:36Z

Replaced content with "This wiki has moved to the [https://kspp.github.io/ KSPP project page]"

← Older revision		Revision as of 20:08, 4 July 2024
Line 1:		Line 1:
	~~= Mission Statement =~~		This wiki has moved to the [https://kspp.github.io/ KSPP project page]

	This project starts with the premise that [https://lwn.net/Articles/410606/ kernel bugs have a very long lifetime], and that the kernel must be designed in ways to protect against these flaws. We must think of [http://lwn.net/Articles/662219/ security beyond fixing bugs]. As a community, we already find and fix individual bugs via static checkers (compiler flags, [http://smatch.sourceforge.net/ smatch], [http://coccinelle.lip6.fr/ coccinelle], [https://scan.coverity.com/projects/linux?tab=overview coverity]) and dynamic checkers (kernel configs, [http://codemonkey.org.uk/projects/trinity/ trinity], [https://www.kernel.org/doc/Documentation/kasan.txt KASan]). Those efforts are important and on-going, but if we want to protect our [http://www.techspot.com/news/57228-google-shows-off-new-version-of-android-announces-1-billion-active-monthly-users.html billion Android phones], our [http://www.zdnet.com/article/2014-the-year-of-the-linux-car/ cars], the [https://training.linuxfoundation.org/why-our-linux-training/training-reviews/linux-foundation-training-prepares-the-international-space-station-for-linux-migration International Space Station], and everything else running Linux, we must get proactive defensive technologies built into the upstream Linux kernel. ~~We need the kernel to [http://kernsec.org/files/lss2015/giant-bags-of-mostly-water.pdf fail safely, instead of just running safely].~~

	~~These kinds of protections have existed for years in the [https://pax.grsecurity.net/ PaX] and [https://grsecurity.net/features.php grsecurity] [https://~~github.com/linux-scraping/linux-grsecurity patches], and in piles of academic papers. For various social, cultural, and technical reasons, they have not made their way into the upstream kernel, and this project seeks to change that. Our focus is on kernel self-protection, rather than kernel-supported userspace protections. The goal is to eliminate classes of bugs and eliminate methods of exploitation.

	~~= Principles =~~
	~~A short list of things to keep in mind when designing self-protection features:~~

	* Patience and an open mind will be needed. We're all trying to make Linux better, so let's stay focused on the results.
	* Upstream development is evolutionary, not revolutionary, which means it can sometimes [https://ieeexplore.ieee.org/abstract/document/~~6624016 take time] for features to become fully realized.~~
	* Features will be more than finding bugs, and should be active at run-time to catch previously unknown flaws.
	* Features will not be developer-"opt-in". When a feature is enabled at build time, it should work for all code built into the kernel (which has the side-effect of also covering out-of-tree code, like in vendor forks).

	~~= Details =~~

	~~Specific details on the~~ project:

	* [[Kernel Self Protection Project/Get Involved\|Get Involved]]
	* [[Kernel Self Protection Project/Work\|Areas of Work Needed]]
	* [[Kernel Self Protection Project/Recommended_Settings\|Recommended Kernel Settings]]
	* [[Kernel Self Protection Project/Patch_Tracking\|Patch Tracking]]

	~~= Documentation =~~

	~~For kernel protections already in upstream (or under active development) that have specific documentation:~~

	* [https://www.kernel.org/doc/html/latest/security/self-protection.html Self-Protection Guidelines]
	* [[Kernel_Protections/refcount_t\|refcount_t]] Kernel reference counter overflow protection
	* [https://samsung.github.io/kspp-study/ Analysis on Kernel Self-Protection: Understanding Security and Performance Implication] ([https://github.com/Samsung/kspp-study github])

KeesCook: /* Principles */

2022-10-28T16:50:48Z

Principles

← Older revision		Revision as of 16:50, 28 October 2022
Line 9:		Line 9:

	* Patience and an open mind will be needed. We're all trying to make Linux better, so let's stay focused on the results.		* Patience and an open mind will be needed. We're all trying to make Linux better, so let's stay focused on the results.
	* Upstream development is evolutionary, not revolutionary, which means it can sometimes take time for features to become fully realized.		* Upstream development is evolutionary, not revolutionary, which means it can sometimes [https://ieeexplore.ieee.org/abstract/document/6624016 take time] for features to become fully realized.
	* Features will be more than finding bugs, and should be active at run-time to catch previously unknown flaws.		* Features will be more than finding bugs, and should be active at run-time to catch previously unknown flaws.
	* Features will not be developer-"opt-in". When a feature is enabled at build time, it should work for all code built into the kernel (which has the side-effect of also covering out-of-tree code, like in vendor forks).		* Features will not be developer-"opt-in". When a feature is enabled at build time, it should work for all code built into the kernel (which has the side-effect of also covering out-of-tree code, like in vendor forks).

KeesCook: /* Documentation */ add Samsung analysis

2022-05-08T08:18:31Z

Documentation: add Samsung analysis

← Older revision		Revision as of 08:18, 8 May 2022
Line 28:		Line 28:
	* [https://www.kernel.org/doc/html/latest/security/self-protection.html Self-Protection Guidelines]		* [https://www.kernel.org/doc/html/latest/security/self-protection.html Self-Protection Guidelines]
	* [[Kernel_Protections/refcount_t\|refcount_t]] Kernel reference counter overflow protection		* [[Kernel_Protections/refcount_t\|refcount_t]] Kernel reference counter overflow protection
			* [https://samsung.github.io/kspp-study/ Analysis on Kernel Self-Protection: Understanding Security and Performance Implication] ([https://github.com/Samsung/kspp-study github])

KeesCook: /* Documentation */

2022-02-14T20:29:50Z

Documentation

← Older revision		Revision as of 20:29, 14 February 2022
Line 26:		Line 26:
	For kernel protections already in upstream (or under active development) that have specific documentation:		For kernel protections already in upstream (or under active development) that have specific documentation:

	~~====~~ [https://www.kernel.org/doc/html/latest/security/self-protection.html Self-Protection Guidelines] ~~====~~		* [https://www.kernel.org/doc/html/latest/security/self-protection.html Self-Protection Guidelines]
	~~====~~ [[Kernel_Protections/refcount_t\|refcount_t]] ~~====~~		* [[Kernel_Protections/refcount_t\|refcount_t]] Kernel reference counter overflow protection
	: Kernel reference counter overflow protection

KeesCook: /* Details */ don't make these sections of their own, just a list so the Contents links aren't confusing.

2022-02-14T20:28:34Z

Details: don't make these sections of their own, just a list so the Contents links aren't confusing.

← Older revision		Revision as of 20:28, 14 February 2022
Line 17:		Line 17:
	Specific details on the project:		Specific details on the project:

	~~====~~ [[Kernel Self Protection Project/Get Involved\|Get Involved]] ~~====~~		* [[Kernel Self Protection Project/Get Involved\|Get Involved]]
	~~====~~ [[Kernel Self Protection Project/Work\|Areas of Work Needed]] ~~====~~		* [[Kernel Self Protection Project/Work\|Areas of Work Needed]]
	~~====~~ [[Kernel Self Protection Project/Recommended_Settings\|Recommended Kernel Settings]] ~~====~~		* [[Kernel Self Protection Project/Recommended_Settings\|Recommended Kernel Settings]]
	~~====~~ [[Kernel Self Protection Project/Patch_Tracking\|Patch Tracking]] ~~====~~		* [[Kernel Self Protection Project/Patch_Tracking\|Patch Tracking]]

	= Documentation =		= Documentation =

KeesCook: /* Details */

2021-10-20T21:27:57Z

Details

← Older revision		Revision as of 21:27, 20 October 2021
Line 20:		Line 20:
	==== [[Kernel Self Protection Project/Work\|Areas of Work Needed]] ====		==== [[Kernel Self Protection Project/Work\|Areas of Work Needed]] ====
	==== [[Kernel Self Protection Project/Recommended_Settings\|Recommended Kernel Settings]] ====		==== [[Kernel Self Protection Project/Recommended_Settings\|Recommended Kernel Settings]] ====
	==== [[Kernel Self Protection Project/~~Work~~\|Patch Tracking]] ====		==== [[Kernel Self Protection Project/Patch_Tracking\|Patch Tracking]] ====

	= Documentation =		= Documentation =

KeesCook: /* Details */ adding a link to patch tracking process

2021-10-20T21:27:42Z

Details: adding a link to patch tracking process

← Older revision		Revision as of 21:27, 20 October 2021
Line 20:		Line 20:
	==== [[Kernel Self Protection Project/Work\|Areas of Work Needed]] ====		==== [[Kernel Self Protection Project/Work\|Areas of Work Needed]] ====
	==== [[Kernel Self Protection Project/Recommended_Settings\|Recommended Kernel Settings]] ====		==== [[Kernel Self Protection Project/Recommended_Settings\|Recommended Kernel Settings]] ====
			==== [[Kernel Self Protection Project/Work\|Patch Tracking]] ====

	= Documentation =		= Documentation =

KeesCook: /* Documentation */

2017-08-04T05:20:51Z

Documentation

← Older revision		Revision as of 05:20, 4 August 2017
Line 26:		Line 26:

	==== [https://www.kernel.org/doc/html/latest/security/self-protection.html Self-Protection Guidelines] ====		==== [https://www.kernel.org/doc/html/latest/security/self-protection.html Self-Protection Guidelines] ====
	==== [[Kernel_Protections/~~HARDENED_ATOMIC~~\|refcount_t]] ====		==== [[Kernel_Protections/refcount_t\|refcount_t]] ====
	: Kernel reference counter overflow protection		: Kernel reference counter overflow protection

KeesCook: /* Documentation */

2017-08-04T05:18:17Z

Documentation

← Older revision		Revision as of 05:18, 4 August 2017
Line 25:		Line 25:
	For kernel protections already in upstream (or under active development) that have specific documentation:		For kernel protections already in upstream (or under active development) that have specific documentation:

	==== [https://~~github~~.~~com/torvalds/linux~~/~~blob~~/~~master~~/~~Documentation~~/security/self-protection.~~txt~~ Self-Protection Guidelines] ====		==== [https://www.kernel.org/doc/html/latest/security/self-protection.html Self-Protection Guidelines] ====
	==== [[Kernel_Protections/HARDENED_ATOMIC\|refcount_t]] ====		==== [[Kernel_Protections/HARDENED_ATOMIC\|refcount_t]] ====
	: Kernel reference counter overflow protection		: Kernel reference counter overflow protection

KeesCook: /* Details */

2017-06-05T23:43:29Z

Details

← Older revision		Revision as of 23:43, 5 June 2017
Line 15:		Line 15:
	= Details =		= Details =

	~~Get to know the~~ details of the project:		Specific details on the project:

	==== [[Kernel Self Protection Project/Get Involved\|Get Involved]] ====		==== [[Kernel Self Protection Project/Get Involved\|Get Involved]] ====