Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Mind The Gap - The Linux Ecosystem Kernel Patch Gap

nullcon via YouTube

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This presentation examines the challenges of maintaining security patches across fragmented Linux kernel ecosystems, especially in embedded devices. It introduces an automated tool for assessing patch completeness by searching kernel repositories and testing whether patches apply to a source tree.

Syllabus

Intro
Kernel patching is our common interest. In other words: How old is your smart TV?
Kernel patching is a complex shared responsibility.
Multiple parties are involved in kernel patching, which brings a unique set of challenges.
Ecosystem fragmentation further complicates kernel patching.
Automation can improve patching processes.
Device vendors need to make four crucial decisions early in the development process.
Kernel lifecycle and support timeframe need to be carefully planned pro-actively.
Legal requirements on support timeframe are relatively recent.
Device vendors must carefully consider the choice of Linux kernel version.
3a A best practice for embedded device vendors is using a LTS Linux kernel version.
Chipset vendors must support the chosen (LTS) kernel version and hardware requirements.
We implemented Kernel Patchalyzer to help analyze the patch status of embedded devices during assessments.
Kernel Patchalyzer helps testing for kernel patches quickly with a high confidence.
Finding available patches involves preprocessing and then searching across several kernel repositories
Automated testing involves trying to apply the patch to the analyzed kernel source code.
Duration of patch analysis is drastically reduced by optimization efforts.
Automation can be utilized to improve patching processes during development.

Taught by

nullcon

Reviews

Start your review of Mind The Gap - The Linux Ecosystem Kernel Patch Gap

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.