Google to fund Linux developers to fix kernel security problems

Linux Foundation will use the developers to work exclusively on security developments

Google and the Linux Foundation have jointly announced that they will fund two full-time developers for Linux kernel security development.

Gustavo Silva and Nathan Chancellor have been giving the go-ahead to maintain and improve kernel security and associated initiatives to ensure the open source software project is secure.

According to a recently published open source contributor survey, there’s a need for additional work on open-source software security, including Linux. The Linux Foundation said while there are thousands of Linux kernel developers, this contribution from Google to underwrite two full-time Linux security maintainers signals the importance of security in the ongoing sustainability of open source software.

“At Google, security is always top of mind and we understand the critical role it plays to the sustainability of open source software,” said Dan Lorenc, staff Software Engineer at Google. “We’re honored to support the efforts of both Gustavo Silva and Nathan Chancellor as they work to enhance the security of the Linux kernel.”

The foundation said Chancellor’s work will focus on triaging and fixing all bugs found with Clang/LLVM compilers while establishing continuous integration systems to support this ongoing work.

“Once those aims are well-established, he plans to begin adding features and polish to the kernel using these compiler technologies,” according to the Foundation.

Chancellor has been working on the Linux kernel for four and a half years. Two years ago, Chancellor started contributing to mainline Linux under the ClangBuiltLinux project, a collaborative effort to get the Linux kernel building with Clang and LLVM compiler tools.

“I hope that more and more people will start to use the LLVM compiler infrastructure project and contribute fixes to it and the kernel – it will go a long way towards improving Linux security for everyone,” said Chancellor.

Silva has recently been working on eliminating several buffer overflow classes by transforming all instances of zero-length and one-element arrays into flexible-array members, which is the preferred and least error-prone mechanism to declare such variable-length types.

He will also focus on fixing bugs while developing defense mechanisms that cut off whole classes of vulnerabilities. Silva said the foundation was working toward building a high-quality kernel that’s “reliable, robust and more resistant to attack every time.”

 “Through these efforts, we hope people, maintainers, in particular, will recognize the importance of adopting changes that will make their code less prone to common errors,” Silva added.

Featured Resources

B2B under quarantine

Key B2C e-commerce features B2B need to adopt to survive

Download now

The top three IT pains of the new reality and how to solve them

Driving more resiliency with unified operations and service management

Download now

The five essentials from your endpoint security partner

Empower your MSP business to operate efficiently

Download now

How fashion retailers are redesigning their digital future

Fashion retail guide

Download now

Recommended

Google, Microsoft fight over documents in antitrust lawsuit
Policy & legislation

Google, Microsoft fight over documents in antitrust lawsuit

30 Jul 2021
Google Cloud seeks to abandon its ‘Killed By Google’ reputation
Software

Google Cloud seeks to abandon its ‘Killed By Google’ reputation

27 Jul 2021
Google adds 600 places to Singapore digital skills bootcamp
Careers & training

Google adds 600 places to Singapore digital skills bootcamp

27 Jul 2021
Google Cloud customers can now select regions based on CO2 output
cloud computing

Google Cloud customers can now select regions based on CO2 output

13 Jul 2021

Most Popular

RMIT to be first Australian university to implement AWS supercomputing facility
high-performance computing (HPC)

RMIT to be first Australian university to implement AWS supercomputing facility

28 Jul 2021
Samsung Galaxy S21 5G review: A rose-tinted experience
Mobile Phones

Samsung Galaxy S21 5G review: A rose-tinted experience

14 Jul 2021
Zyxel USG Flex 200 review: A timely and effective solution
Security

Zyxel USG Flex 200 review: A timely and effective solution

28 Jul 2021