Re: Technical repercussions of grsecurity removal
"Tóth Attila" <[email protected]> Tue, 2 May 2017 19:23:41 +0200
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
2017.Május 2.(K) 18:59 időpontban Daniel Cegiełka ezt írta: >> pax.?mark actually, since the eclass helper is called pax-mark. :) >> I'd hold off on removing those for at least a few months, though. >> > > If PAX_MPROTECT returns (KSPP?), then ebuilds will need to be > 'paxmarked' again. Years of work and PaX support ends in the trash. I must aggree here. If there will be an alternative implementation marking may regain its meaning. The same binaries need to be marked in some way or another. I wouldn't simply dump it unless it would disturb some functionality. Regards: Dw. -- dr Tóth Attila, Radiológus, 06-20-825-8057 Attila Toth MD, Radiologist, +36-20-825-8057