From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id C2D011396D0 for ; Wed, 23 Aug 2017 18:58:18 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CD3D81FC043; Wed, 23 Aug 2017 18:58:16 +0000 (UTC) Received: from wp260.webpack.hosteurope.de (wp260.webpack.hosteurope.de [IPv6:2a01:488:42:1000:50ed:851d::]) (using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 929F41FC003 for ; Wed, 23 Aug 2017 18:58:16 +0000 (UTC) Received: from p549a919b.dip0.t-ipconnect.de ([84.154.145.155] helo=vega.skynet.aixah.de); authenticated by wp260.webpack.hosteurope.de running ExIM with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) id 1dkar0-000356-8i; Wed, 23 Aug 2017 20:58:14 +0200 Received: from vega.skynet.aixah.de (localhost [IPv6:::1]) by vega.skynet.aixah.de (Postfix) with ESMTP id C2031260097 for ; Wed, 23 Aug 2017 20:58:13 +0200 (CEST) Date: Wed, 23 Aug 2017 20:58:03 +0200 From: Luis Ressel To: gentoo-hardened@lists.gentoo.org Subject: Re: [gentoo-hardened] Don't kill hardened yet - Porting the patch forward is complete Message-ID: <20170823205803.7b19d2d5@vega.skynet.aixah.de> In-Reply-To: References: <96b67ad67f12ade60d5c7a37f3f61f16@cadamail.com> X-Mailer: Claws Mail 3.15.0-dirty (GTK+ 2.24.31; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; boundary="Sig_/diWX8ZLv6baX7huX4AsJrmv"; protocol="application/pgp-signature" X-bounce-key: webpack.hosteurope.de;aranea@aixah.de;1503514696;1a03af18; X-HE-SMSGID: 1dkar0-000356-8i X-Archives-Salt: 39997573-6f05-4759-8cd8-0779bd15c509 X-Archives-Hash: 427587e2e09f0c29f07f5ee380cc68c9 --Sig_/diWX8ZLv6baX7huX4AsJrmv Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Wed, 23 Aug 2017 12:13:31 -0500 Parker Schmitt wrote: > Have we thought about paying spender to give us patches? We could > agree to a license that requires it to be on Gentoo....just a thought Yeah, that won't work. spender and PaX team have made the experience that if they publish their code under whatever license, some tech companies will come along and use the code without giving a shit about said license. That's one of the reasons why the 'stable' grsec patch series, as well as their git repository, hadn't been public for quite a while even before they made the decision to stop publishing code altogether. @Bob: The Gentoo Hardened project is aware of minipli's efforts, but it has been decided not to make his tree available as an ebuild in ::gentoo for now. Since all a kernel ebuild does is to dump the sources in /usr/src, it doesn't make much of a difference anyway, but if someone wants to create an ebuild in their overlay, they're of course welcome to do so. Regards, Luis --Sig_/diWX8ZLv6baX7huX4AsJrmv Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEbPzLt4vriSGj7oj2YKkwapaNrTgFAlmd0DsACgkQYKkwapaN rTgTCw//ebRGzRj0TFvhm7RyvJifc2EC+ZtWE3ydjqgdfpmvvOWoA7gdBQ1T0/ZW TW4+Y1MEhtvIUMUkB/KlSSVLVs4IPBSbsXUQAGadccq+FalqzniIEnSJ9oTv2XCj Vn/6RidSUj+c7GKMWNNQyrGXywDbtwF75jnpUGJFeFFoIXHPVyNVOsfu0FhT9jKM 7W7EnsQZMtshKb2DGetWD5X1EQCDFerJ4HBT0FpBaPyc23ozBEjDP4ppv+CrZ2SK vVSEmsP3+8xoUzbJ5HJUH+yZh7GXLfyy9/AMLMNx6DFiBH/7ULbT2OvSm/IuPDYq ACXW8oNl9ipcsYZoChOFALDHeSBjPrLvsDkROQUFtFzGBOH5OeFD7KddC/T+KJ4+ 899QEF/Qy997WBtXJOb58oAgpwPedugAgqyW/EnCCS5WQpMvcL4npoJQNk5maNbA vGAaaqeR5LjLvm7wKuVhybxog5cxfCo/nv4ewOjXVdWYKtN+0WGeR18p/8qxTvrt 6wSywH7uRaoGvdCZfyWIMIMQ/iXWcADWSRVkzRwc+HwMvArw/vj6dt/guKqV+/+5 VuSNaKZeUUwnOw9pJIcPd/airMFYvo2LJWmL5RaS8JyvsHuuk9zYTR8IWio4aPhR yjaat3tDCk4OUXfwipJNNJHw9bEupYVG1JrqHEg9Nn/Sf3Ojc0U= =KzWV -----END PGP SIGNATURE----- --Sig_/diWX8ZLv6baX7huX4AsJrmv--