Mail archive
alpine-devel

Re: [alpine-devel] Linus & others v. grsecurity

From: Shiz <hi_at_shiz.me>
Date: Wed, 12 Jul 2017 09:53:07 +0200

> On 12 Jul 2017, at 09:18, William Pitcock <nenolod_at_dereferenced.org> wrote:
>
> Personally, having looked at strcat's work, I am optimistic, and
> basically I see a future where we can draw from KSPP, strcat's work,
> and our own work to provide a hardened kernel for Alpine 3.7. I'm not
> too worried about it.
> Ironically, strcat's work on tuning the Linux ASLR implementation
> scores better on paxtest than PaX, which I found interesting.
>
> William

That’s likely due to upstream not supporting UDEREF/KERNEXEC, which takes
away around 8-9 bits of entropy, IIRC.

- Shiz




---
Unsubscribe:  alpine-devel+unsubscribe_at_lists.alpinelinux.org
Help:         alpine-devel+help_at_lists.alpinelinux.org
---
Received on Wed Jul 12 2017 - 09:53:07 GMT