Re: Technical repercussions of grsecurity removal
Daniel Cegiełka <[email protected]> Tue, 2 May 2017 18:59:48 +0200
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <CAPLrYESD8DtoKd-w+CfcGX5dbwZNpPP2PFcCZ24F+yVfUm4srQ@mail.gmail.com> |
2017-05-02 18:02 GMT+02:00 Luis Ressel <[email protected]>: > On Tue, 2 May 2017 17:56:22 +0200 > Daniel Cegiełka <[email protected]> wrote: > >> grep -r -e paxmark -e pax_kernel /usr/portage/ > > pax.?mark actually, since the eclass helper is called pax-mark. :) > I'd hold off on removing those for at least a few months, though. > If PAX_MPROTECT returns (KSPP?), then ebuilds will need to be 'paxmarked' again. Years of work and PaX support ends in the trash. Now we see that there is a new level of security: user trust.