Kernel.org

Last updated
kernel.org
Type of site
Open source repository
Available inEnglish
URL www.kernel.org
IPv6 supportYes
CommercialNo
Current statusActive

kernel.org is the main distribution point of source code for the Linux kernel, which is the base of the Linux operating system.

Contents

The website and related infrastructure, which is operated by the Linux Kernel Organization, [1] host the repositories that make all versions of the kernel's source code available to all users. The main purpose of kernel.org is to host repositories used by Linux kernel developers and maintainers of various Linux distributions. Additionally, it hosts various other projects or their mirrors, including the Linux Documentation Project (LDP) and CPAN. [2] [3]

Since August 2014, kernel.org provides additional security by mandating two-factor authentication for commits performed to hosted Git repositories that contain source code of the Linux kernel, with support for both soft tokens and hard tokens. [4]

2011 security breach

On 28 August 2011, developers at kernel.org realized that there had been a major security breach. Intruders had gained root access to the system and added a trojan to the startup scripts. Developers reinstalled all the servers and investigated the origin of the attack. [5] It is likely, although not confirmed, that the kernel.org intrusion is related to the intrusions of LinuxFoundation.org and Linux.com websites that were determined shortly afterwards. [6] [7]

Git, a distributed and open-source source management system designed by Linus Torvalds to guarantee the integrity of the source code, is used to keep track of changes in the Linux source code. This and the fact that the source code is available to anyone and widely known makes any attempt to tamper with the source code fairly easy to detect and revert if required. [8] All that makes kernel.org not the primary repository, but rather a distribution point of the kernel sources.

Kernel.org was back online by November 2011, with the exception of a few secondary services. As of January 2024, however, the site maintainers still have not published a report of how the breach occurred. [9]

A 27 year old resident of Florida, US was arrested in 2016 for the attack. [10]

See also

Related Research Articles

<span class="mw-page-title-main">GNU Hurd</span> Operating system kernel designed as a replacement for Unix

GNU Hurd is a collection of microkernel servers written as part of GNU, for the GNU Mach microkernel. It has been under development since 1990 by the GNU Project of the Free Software Foundation, designed as a replacement for the Unix kernel, and released as free software under the GNU General Public License. When the Linux kernel proved to be a viable solution, development of GNU Hurd slowed, at times alternating between stasis and renewed activity and interest.

<span class="mw-page-title-main">Linux distribution</span> Operating system based on the Linux kernel

A Linux distribution is an operating system made from a software collection that includes the Linux kernel and often a package management system. Linux users usually obtain their operating system by downloading one of the Linux distributions, which are available for a wide variety of systems ranging from embedded devices and personal computers to powerful supercomputers.

Darwin is the core Unix operating system of macOS, iOS, watchOS, tvOS, iPadOS, visionOS, and bridgeOS. It previously existed as an independent open-source operating system, first released by Apple Inc. in 2000. It is composed of code derived from NeXTSTEP, FreeBSD, other BSD operating systems, Mach, and other free software projects' code, as well as code developed by Apple.

The Direct Rendering Manager (DRM) is a subsystem of the Linux kernel responsible for interfacing with GPUs of modern video cards. DRM exposes an API that user-space programs can use to send commands and data to the GPU and perform operations such as configuring the mode setting of the display. DRM was first developed as the kernel-space component of the X Server Direct Rendering Infrastructure, but since then it has been used by other graphic stack alternatives such as Wayland and standalone applications and libraries such as SDL2 and Kodi.

<span class="mw-page-title-main">Git</span> Software for version control of files

Git is a distributed version control system that tracks changes in any set of computer files, usually used for coordinating work among programmers who are collaboratively developing source code during software development. Its goals include speed, data integrity, and support for distributed, non-linear workflows.

In software development, distributed version control is a form of version control in which the complete codebase, including its full history, is mirrored on every developer's computer. Compared to centralized version control, this enables automatic management branching and merging, speeds up most operations, improves the ability to work offline, and does not rely on a single location for backups. Git, the world's most popular version control system, is a distributed version control system.

<span class="mw-page-title-main">Free and open-source graphics device driver</span> Software that controls computer-graphics hardware

A free and open-source graphics device driver is a software stack which controls computer-graphics hardware and supports graphics-rendering application programming interfaces (APIs) and is released under a free and open-source software license. Graphics device drivers are written for specific hardware to work within a specific operating system kernel and to support a range of APIs used by applications to access the graphics hardware. They may also control output to the display if the display driver is part of the graphics hardware. Most free and open-source graphics device drivers are developed by the Mesa project. The driver is made up of a compiler, a rendering API, and software which manages access to the graphics hardware.

<span class="mw-page-title-main">Mercurial</span> Distributed revision-control tool for software developers

Mercurial is a distributed revision control tool for software developers. It is supported on Microsoft Windows, Linux, and other Unix-like systems, such as FreeBSD and macOS.

Squashfs is a compressed read-only file system for Linux. Squashfs compresses files, inodes and directories, and supports block sizes from 4 KiB up to 1 MiB for greater compression. Several compression algorithms are supported. Squashfs is also the name of free software, licensed under the GPL, for accessing Squashfs filesystems.

<span class="mw-page-title-main">Comparison of open-source wireless drivers</span>

Wireless network cards for computers require control software to make them function. This is a list of the status of some open-source drivers for 802.11 wireless network cards.

This is a technical feature comparison of different disk encryption software.

<span class="mw-page-title-main">Linux Foundation</span> Non-profit technology consortium to develop the Linux operating system

The Linux Foundation (LF) is a non-profit organization established in 2000 to support Linux development and open-source software projects. In addition to providing a neutral home where Linux kernel development can be fostered, the LF is dedicated to building sustainable ecosystems around open-source projects to accelerate technology development and encourage commercial adoption.

Lynis is an extensible security audit tool for computer systems running Linux, FreeBSD, macOS, OpenBSD, Solaris, and other Unix derivatives. It assists system administrators and security professionals with scanning a system and its security defenses, with the final goal being system hardening.

<span class="mw-page-title-main">GitHub</span> Hosting service for software projects

GitHub, Inc. is a developer platform that allows developers to create, store, manage and share their code. It uses Git software, providing the distributed version control of Git plus access control, bug tracking, software feature requests, task management, continuous integration, and wikis for every project. Headquartered in California, it has been a subsidiary of Microsoft since 2018.

<span class="mw-page-title-main">Linux kernel</span> Operating system kernel

The Linux kernel is a free and open-source, monolithic, modular, multitasking, Unix-like operating system kernel. It was originally written in 1991 by Linus Torvalds for his i386-based PC, and it was soon adopted as the kernel for the GNU operating system, which was written to be a free (libre) replacement for Unix.

<span class="mw-page-title-main">OpenZFS</span> Open-source implementation of the ZFS file system

OpenZFS is an open-source implementation of the ZFS file system and volume manager initially developed by Sun Microsystems for the Solaris operating system and now maintained by the OpenZFS Project. It supports features like data compression, data deduplication, copy-on-write clones, snapshots, and RAID-Z. It also supports the creation of virtual devices, which allows for the creation of file systems that span multiple disks.

<span class="mw-page-title-main">Void Linux</span> Independent distribution developed entirely by volunteers

Void Linux is an independent Linux distribution that uses the X Binary Package System (XBPS) package manager, which was designed and implemented from scratch, and the runit init system. Excluding binary kernel blobs, a base install is composed entirely of free software.

<span class="mw-page-title-main">Fuchsia (operating system)</span> Computer operating system by Google

Fuchsia is an open-source capability-based operating system developed by Google. In contrast to Google's Linux-based operating systems such as ChromeOS and Android, Fuchsia is based on a custom kernel named Zircon. It publicly debuted as a self-hosted git repository in August 2016 without any official corporate announcement. After years of development, its official product launch was in 2021 on the first-generation Google Nest Hub, replacing its original Linux-based Cast OS.

youtube-dl is a free and open source download manager for video and audio from YouTube and over 1,000 other video hosting websites. It is released under the Unlicense software license.

<span class="mw-page-title-main">SerenityOS</span> Hobbyist desktop computing operating system

SerenityOS is a free and open source desktop operating system that has been in continuous development since 2018. Initially the one-man project of Swedish programmer Andreas Kling, SerenityOS is now developed by a community of hobbyists. The system supports the x86-64 instruction set, features a preemptive kernel, and hosts multiple complex applications including its own web browser, Ladybird, and integrated development environment (IDE).

References

  1. "The Linux Kernel Organization". Kernel.org. Linux Kernel Organization. 2013-12-05. Retrieved 2015-01-15.
  2. "The Linux Kernel Archives - FAQ". Kernel.org. Linux Kernel Organization. 2014-09-02. Retrieved 2015-01-16.
  3. "Mirrors.kernel.org, a service of the Linux Kernel Archives". Kernel.org. Linux Kernel Organization. 2014-12-13. Retrieved 2015-01-16.
  4. Konstantin Ryabitsev (2014-08-18). "Linux Kernel Git Repositories Add 2-Factor Authentication". Linux.com. Archived from the original on 2018-01-31. Retrieved 2014-08-22.
  5. Jonathan Corbet (2011-08-31). "The cracking of kernel.org". The Linux Foundation. Archived from the original on 2011-10-29. Retrieved 2011-11-08.
  6. "Blog Archive » kernel.org down for maintenance?". Heimic. 2011-09-13. Archived from the original on 2011-09-23. Retrieved 2014-03-02.
  7. "kernel.org is down!". 16 September 2011.
  8. Fahmida Y. Rashid (2011-09-01). "Kernel.org hacked, but Linux kernel safe thanks to git". linuxfordevices.com. Archived from the original on 2013-01-27. Retrieved 2011-11-08.
  9. Dan Goodin (2013-09-24). "Who rooted kernel.org servers two years ago, how did it happen, and why?". Ars Technica . Retrieved 2018-01-30.
  10. "Feds pin brazen kernel.org intrusion on 27-year-old programmer". Ars Technica .