Subject: [Tsvwg] comments on draft-larsen-tsvwg-port-randomization-01

From: Stephen Hemminger <[email-masked]>
Date: Thu, 7 Jun 2007 11:47:19 -0700

The document covers the existing port selection algorithms chosen by current Linux
kernel. The implementation of these was not difficult and the developers have
not received any reports of application problems as a result of the change
from linear selection (Algorithm 1) to random selection based on address (Algorithm 3).

You could add a note to the Linux section, that various 'security enhancement'
packages exist that add port randomization (Algorithm 2). Probably the most
common was Grsecurity: http://www.grsecurity.net/

One nit: Linux is not usually referred to as the "Linux Project" and certain
individuals (RMS) get upset about using Linux as general term. Therefore I recommend
listing the reference [Linux] as:

   [Linux]    Linux Kernel, "http://www.kernel.org".

-- 
Stephen Hemminger <[email-masked]>