From: bob@cadamail.com
To: gentoo-hardened@lists.gentoo.org
Subject: [gentoo-hardened] Don't kill hardened yet - Porting the patch forward is complete
Date: Wed, 23 Aug 2017 10:10:12 -0400 [thread overview]
Message-ID: <b82e11ad308d4d242c014fc179ee11d8@cadamail.com> (raw)
Hello Everyone,
I just heard that gentoo-hardened will be scrapped by end-of-month.
Well, I have some good news - it doesn't have to be. A project has risen
up to continue supporting the patch on future kernels and I have been
running it successfully for over a month with the stock hardened
profile.
You can download the patches here, they are also GPG signed:
https://github.com/minipli/linux-unofficial_grsec/releases
So-called "linux-hardened project (KSPP)" and "SELinux" do not even
slightly compare at their current stage of development in terms of
kernel hardening and PaX protection. In the mid-term, I would recommend
using these forward patches for hardened-LTS 4.9.x and hope
Gentoo-hardened will continue for awhile longer while we wait for
further improvements.
Thank you for your time and concern.
next reply other threads:[~2017-08-23 14:10 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-08-23 14:10 bob [this message]
2017-08-23 16:20 ` [gentoo-hardened] Don't kill hardened yet - Porting the patch forward is complete bob
2017-08-23 17:13 ` Parker Schmitt
2017-08-23 18:58 ` Luis Ressel
2017-08-23 20:11 ` philipp.ammann
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=b82e11ad308d4d242c014fc179ee11d8@cadamail.com \
--to=bob@cadamail.com \
--cc=gentoo-hardened@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox