From mboxrd@z Thu Jan 1 00:00:00 1970 Reply-To: kernel-hardening@lists.openwall.com References: <56496AB0.5070905@gmail.com> From: Daniel Micay Message-ID: <564ADA32.5040708@gmail.com> Date: Tue, 17 Nov 2015 02:41:38 -0500 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="CJN6t1eIvhgda8rrE3Si0UCoXbEcg9RXI" Subject: Re: [kernel-hardening] To: kernel-hardening@lists.openwall.com List-ID: This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --CJN6t1eIvhgda8rrE3Si0UCoXbEcg9RXI Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 16/11/15 07:13 AM, Richard Weinberger wrote: > On Mon, Nov 16, 2015 at 6:33 AM, Daniel Micay w= rote: >> On 15/11/15 03:59 PM, Richard Weinberger wrote: >>> On Fri, Nov 13, 2015 at 4:43 PM, west suhanic wrote: >>>> Hello All: >>>> >>>> I am a hardened gentoo user. How can we get the grsecurity code into= the >>>> kernel? >>> >>> As soon all downsides and drawbacks are identified/resolved. >>> Which basically means that we have to redo a lot (it not all). >> >> You might not be familiar with the grsecurity/PaX features and their >> implementations but lots of people are. It's not unexplored territory >> without known trade-offs. It has active developers who are happy to >> answer questions about it (within reason). >=20 > I'll kindly ignore this personal attack. I didn't mean this as a personal attack. I just found that statement to be off i.e. it seems to imply that PaX/grsecurity are low quality and that they need to be improved to upstream them, when IMO what really needs to happen to just making the features more politically acceptable even if it ends up making them harder to implement / less useful. --CJN6t1eIvhgda8rrE3Si0UCoXbEcg9RXI Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWStoyAAoJEPnnEuWa9fIqc0IP/0B5Hw2gECiXphtWj3LeJg/Z 9/1LK7OXdfQTafBGeGoJJpQzn1W1x1PHD3svFbdxWB69epatfaOklpMslHJXtgME BsS0Gxg+WvSmHvOqhmEvrX2MoZ22G+2rVpVatFQ8S860NvjIej/Ub19IMO+KM9qu +OHI2XrzAyoMqqg5qpCWiHBLBNcHU7uQL+/P+WmVnMfH3df89sJ9LjK0ZWsVgtd+ yNfYy7q1lW6SQzIC4ExyYCOZb3xyRcDDCJk4nd+rOs34Gj0WansiMA3s0Uq1oHl0 GJVmtn/ak8+tA51TWvffQBNQG96zQbPbcHOTxgIkOjG0zSCTOAGfvWlDF16Wt18t PakdEDKbLvEc1iUMOoGZgczF2/hapIlHboXsI0UnAYxwTVWucvEuyfu3lrWeSR6v r+BgaqioFf55gZqvDTpVBoM/5v8JibpfLh8bLbD2+iJimQL6DM/0te+yI2TJj70I P0Xt1+Z/KGtpezX6wCm2w5NToxMW0wqo+e3VCu20O95RvrhtTCr0Tf6+r8pH8Ss6 7KizVZss5YTU6NXf6w4A6BTwu+JEuzGqCRzD/t2jK9ULajRITZj5WHAu85tTJQlg +qWSm0efdEviwJiOtKUPXwtgwf0aUBjZxL0pplxOSF/cc+O0I6c0AHBh7RVzQbo4 CEwcJJZqOQzrMl3RuiAE =IHuL -----END PGP SIGNATURE----- --CJN6t1eIvhgda8rrE3Si0UCoXbEcg9RXI--