[gentoo-user] Re: gentoo older versions

[James]

Nitin Kanaskar <nitinvk04 <at> gmail.com> writes:


> Thank you so much Dale again - but i
> would try to follow links given by Neil -
> thank you Neil - and chk in the cvs repositories.
> Really appreciate your willingness to help.

Hello Nitin,

After reading your thread, you seem to be a bit
flexible in what you pursue as opportunities
for security analysis. Just a suggestion, but,
in lieu of pursuing a very 'well worn path' of
vulnerability assessments, might you be interested
in exploring an alternative?


If so, consider testing for security vulnerabilities
on a variety of embedded (Gentoo) linux devices/architectures?


You'll find embedded linux on a variety of hardware,
very rich in opportunities for exploits. There are
far fewer folks to test and fix problems, and many
of the builds are barely able   to support the 
arch, let alone robust security analysis. You 
could easily distinguish your self and provide a 
huge service to the gentoo community, not to mention
working with some very sharp minds who
inhabit this space.


For example, you could test the vulnerability
difference between the various C libraries,
with all else being the same. Or look at vulnerability
differences between soft-float and using builds
based on hardware, just to name a few. Certainly with
a quick survey of the space, you can come up
with lots of ideas that would yield lots of
uniquely interesting information, and blaze a new path.
Gentoo on ARM is a HUGE opportunity for distinction.


Here are a few links for your perusal:

http://www.gentoo.org/proj/en/base/embedded/index.xml

http://www.gentoo.org/proj/en/base/embedded/handbook/

http://tinderbox.dev.gentoo.org/

http://slonopotamus.org/gentoo-on-n8x0

http://en.gentoo-wiki.com/wiki/TinyGentoo

http://wiki.debian.org/ArmEabiPort

http://www.codesourcery.com/sgpp/lite/arm/portal/target_arch1?@template=faq#q_gnu_linux_long_long

http://martinwguy.co.uk/martin/tech/Maverick/

Just a suggestion....

hth,
James