[Users] Solar Designer Audit 2005

Solar Designer solar at openwall.com
Fri May 15 08:08:12 PDT 2015


On Wed, May 13, 2015 at 02:37:11PM -0700, Kir Kolyshkin wrote:
> On 05/12/2015 02:04 AM, apoc at keemail.me wrote:
> >I'm interested in the security audit performed by Solar Designer in 
> >2005, which is mentioned in the "Security" section of the openvz website.
> >
> >Is there a reason why it's still not publicly available?
> 
> It was never meant to be released to the general public, it was an 
> internal audit.

FWIW, I don't mind publishing it now, if Parallels are OK with this and
if there's still interest, although IIRC there were a handful of
references to private discussions in the audit report.

> Having said, I can share some details I do remember.

Thanks!  I also recall that vz* tools were partially in-scope, with some
relevant findings.

Alexander


More information about the Users mailing list