[maemo-developers] Security Guidance for N800 OS development

[From: Philippe De Swert]

Hi,


> On Tue, 2007-02-20 at 10:12 -0600, Paul Klapperich wrote:
> > The internet tablet runs an Xserver for one. Use nmap on your PC to
> > scan your Nokia. It has open ports. Marius had specifics earlier.
> 
> Which is a fixed bug, and will be closed in the next release.  It's not
> rocket science to fix this yourself now if it worries you, which will
> make it zero open sockets on a N800.
> 
> Yes, someone should make an iptables package for the people who are
> running services on their N800.  However the stock image has no services
> so doesn't really need a firewall.

I second Ross here. Nokia only has a responsability towards its own releases.
You can hardly expect that they can secure every possible deamon or service
they are NOT running or delivering themseleves. It is the security of the
STOCK image that counts.

OTOH for somebody who is concerned about getting a firewall, it should not be
too hard to port iptables. It has been done very often for other platforms.

Cheers,

Philippe
---
Scarlet One Unlimited
Free national calls, surf up to 6 Mbit/s, 50 GB download volume
For only EUR 49,95 per month. No Belgacom subscription needed.  All in!
http://www.scarlet.be