Re: RIP hardened-sources

Alex Efros <[email protected]> Sun, 30 Apr 2017 16:16:46 +0300

Newsgroups	gmane.linux.gentoo.hardened
Organization	http://powerman.name/
Message-ID	<[email protected]>

Hi!

On Sun, Apr 30, 2017 at 04:00:39PM +0300, Andrew Savchenko wrote:
> The only way to preserve this functionality in the long run is to
> port it to the mainline kernel. This will not be easy, most likely
> not everything will be accepted, some stuff will have to be
> reimplemented using another approaches, etc.

We had 16 years to do this with help of GrSec/PaX developers. It wasn't
happened, and it's unlikely happens now unless some huge company decide to
spend a lot of resources for this. Maybe Google will do, in the name of
increasing Android security. And I'm afraid there are no more options now.

> But there is no other way. GrSec/PaX team can be trusted no longer.
> They ruined all 16 years of good and trustworthy record by what was
> done 3 days ago, though the first bells rang 2 years ago when paid
> subscription for stable patches was enforced. Even if they will
> yield to the community pressure now, they may repeat this betrayal
> later and thus can be trusted no longer.

Hey hey hey! Don't be so harsh. No one is perfect, everyone made mistakes,
and credits/money/ego is very usual "good" reason to made mistake.
Not all people is able to admit their mistakes and fix them, but we still
may believe in GrSec/PaX developers. Just give them some time to cool down
and a few good reasons to change their decision. They've pushed the
button, true, but they can also release the button if they will like to.
And tell it was a "training alert". :)

-- 
			WBR, Alex.

signature.asc (application/pgp-signature, 833 B)