Re: The status of grsecurity upstream and hardened-sources downstream

Hi!

On Fri, Jun 23, 2017 at 12:28:27PM -0400, Anthony G. Basile wrote:
> My plan then is as follows.  I'll wait one more month and then send out
> a news item and later mask hardened-sources for removal.

Well, it's about a month now. I didn't replied earlier because others
already mentioned all good ideas and I was hoping these ideas will be
accepted… :(

But, just in case, I'm +1 for both ideas to keep 4.9 LTS support as long
as possible (and mark one of hardened-sources-4.9.x as stable) to give us
a couple of years to find another solution and/or develop a migration plan
from GrSecurity/PaX to RSBAC (or anything else which provide best
available security level for modern kernels) - anything better than just
"switch to gentoo-sources and enable SeLinux to feel real pain" will go.

Seriously, which options we actually have right now, if hardened-sources
will be masked on next week and removed from the tree on next month?

-- 
			WBR, Alex.