Funtoo Security Project

We aim to increase the security and hardening of Funtoo for: Users, Developers and Funtoo itself

Users: We aim to keep current with public CVEs and release resolutions in a reasonable time. In the future we will audit installed packages to ensure that they meet reasonable security standards.

Funtoo (Internal): we aim to keep Funtoo's own infrastructure secure and hardened

Developers: If you are interested in security and hardening and would like to join our efforts, please let us know. We're looking for help in: SELinux, GrSecurity, kernel hardening, userland hardening, building security tools for Funtoo, anything we've overlooked, you can find us in the #security channel on Discord.

Security bug tracker

We track Funtoo Linux security vulnerabilities (esp. vulnerable package versions) under dedicated vulnerabilities page.

If you find some security related bug, you're encouraged to crate a Jira issue under "Security Vulnerability" category and/or let us know in the #security channel on Discord

Related projects

• vulner - discover CVEs for packages installed by the portage

Status Updates

2022-07-26

app-antivirus/lkrg - effective kernel rootkit detector available in security-kit

2022-03-06

app-admin/vulner - CVE scanner for packages installed by the portage available in security-kit