Re: Technical repercussions of grsecurity removal

Andrew Savchenko <[email protected]> Mon, 1 May 2017 13:28:54 +0300

Newsgroups	gmane.linux.gentoo.hardened
Message-ID	<[email protected]>

On Mon, 1 May 2017 09:38:43 +0000 Sven Vermeulen wrote:
> Hi all,
> 
> There is a nice debate ongoing on the mailinglist [1] on the topic of
> grsecurity's recent decision to no longer provide the test patches to the
> public. I'd like to keep the debate on the rationale of it in that
> discussion, but focus here on what we, from Gentoo Hardened, now need to do
> or which direction we're going to move forward with.
> 
> [1]
> https://archives.gentoo.org/gentoo-hardened/message/a06145056b167f52c079bffd9c9a51ac
> 
> The obvious step is indeed to stop further *current* development on
> hardened-sources.

Why not support hardened-sources while corresponding vanilla
kernels are still supported? E.g. 4.9 is a longterm branch, so we
should be able to keep hardened-sources-4.9* up-to-date with
vanilla bugfixes. This will give a nice transition period for
hardened users.

Best regards,
Andrew Savchenko

signature.asc (application/pgp-signature, 833 B)