
In particular, Bootlin has been working on improving OpenWrt's security for an unnamed customer. They have been adding DM-VERITY support to OpenWrt for transparent integrity checking of data on block devices. The other big aspect of this work is plumbing Security Enhanced Linux (SELinux) support in OpenWrt.
The OpenWrt support for DM-VERITY and SELinux is currently under review but the hope is that all the work will be upstreamed in 2020.
More details on this effort via the Bootlin Blog.
5 Comments