Re: Technical repercussions of grsecurity removal

"Tóth Attila" <[email protected]> Tue, 2 May 2017 19:23:41 +0200
Newsgroups gmane.linux.gentoo.hardened
Message-ID <[email protected]>
2017.Május 2.(K) 18:59 időpontban Daniel Cegiełka ezt írta:
>> pax.?mark actually, since the eclass helper is called pax-mark. :)
>> I'd hold off on removing those for at least a few months, though.
>>
>
> If PAX_MPROTECT returns (KSPP?), then ebuilds will need to be
> 'paxmarked' again. Years of work and PaX support ends in the trash.

I must aggree here. If there will be an alternative implementation marking
may regain its meaning. The same binaries need to be marked in some way or
another. I wouldn't simply dump it unless it would disturb some
functionality.

Regards: Dw.
-- 
dr Tóth Attila, Radiológus, 06-20-825-8057
Attila Toth MD, Radiologist, +36-20-825-8057