Re: RIP hardened-sources

Andrew Savchenko <[email protected]> Sun, 30 Apr 2017 16:07:28 +0300

Newsgroups	gmane.linux.gentoo.hardened
Message-ID	<[email protected]>

Hi,

On Sat, 29 Apr 2017 15:47:44 +0300 Alex Efros wrote:
> Hi!
> 
> On Sat, Apr 29, 2017 at 01:49:20PM +0200, Luis Ressel wrote:
> > I suppose we all just grudgingly switch over to gentoo-sources?
> 
> I wonder for how long time current kernel with grsec will be more safe and
> protected against new exploits than up-to-date gentoo-sources…
> Something new in security: avoid updates to have better protection.

I assume as long as the vanilla kernel 4.9 is supported upstream it
should be relatively easy to backport all updates to the hardened-
sources. 4.9 is the longterm branch, so hardened users should be
safe for a year or so. By that time one should switch to vanilla
kernel (or whatever replacement will be available), because old and
unmaintained software is the root of all evil in security.

Best regards,
Andrew Savchenko

signature.asc (application/pgp-signature, 833 B)