Re: [alpine-devel] Linus & others v. grsecurity
> On 12 Jul 2017, at 09:18, William Pitcock <nenolod_at_dereferenced.org> wrote:
> Personally, having looked at strcat's work, I am optimistic, and
> basically I see a future where we can draw from KSPP, strcat's work,
> and our own work to provide a hardened kernel for Alpine 3.7. I'm not
> too worried about it.
> Ironically, strcat's work on tuning the Linux ASLR implementation
> scores better on paxtest than PaX, which I found interesting.
That’s likely due to upstream not supporting UDEREF/KERNEXEC, which takes
away around 8-9 bits of entropy, IIRC.
Received on Wed Jul 12 2017 - 09:53:07 GMT