Date: Wed, 26 Apr 2017 21:02:42 +0200
From: Natanael Copa <ncopa@alpinelinux.org>
To: William Pitcock <nenolod@dereferenced.org>
Cc: Jens Staal <staal1978@gmail.com>, developer@it-offshore.co.uk,
 alpine-dev <alpine-devel@lists.alpinelinux.org>
Subject: Re: [alpine-devel] grsec go or no-go call for 3.6
Message-ID: <20170426210242.441cde5e@ncopa-macbook.copa.dup.pw>
In-Reply-To: <CA+T2pCFa0VteSPtV-VN5TTkGqUP5P6d=UD7zSVH0swC9KXqY0w@mail.gmail.com>
References: <CA+T2pCGaas_84oGi-JvKH2+8xhpyjrfTUakFvv0wEczTJTN_Pg@mail.gmail.com>
	<6cb1b9fe292e94575683ea97bafe2c61@alpinelinux.org>
	<CA+T2pCEdrM4iLKgA3phGLnpRA5Jo09nVEp5vsT6TKXPEgCOfdw@mail.gmail.com>
	<20170405220743.0fb80170@ncopa-desktop.copa.dup.pw>
	<ef7a7202-131f-7832-5960-9fe31ec65998@it-offshore.co.uk>
	<CAK8RtFqC0EMcv1qGmDTFvnn5O0C+wzLBCKO+5Qd6nAjEw3JydA@mail.gmail.com>
	<CAK8RtFoWbt6VoTQuhGHivyCnfQk_U7ovvp1KtDxDMoA=AyUbMA@mail.gmail.com>
	<CAK8RtFr7FD0VgAy=qghRgYt2pcA-n7H=+Ct5Z-+w-dGRDr2iqQ@mail.gmail.com>
	<CAK8RtFofLuq2FWu3iV_dEDmMR7hfdhn2kYTDy9zC7TkZctCydA@mail.gmail.com>
	<CAK8RtFrHJL+5mQxMHx+OYePeQJrnErdToUNELeWd-C8H28iP6A@mail.gmail.com>
	<CA+T2pCFa0VteSPtV-VN5TTkGqUP5P6d=UD7zSVH0swC9KXqY0w@mail.gmail.com>
Precedence: list
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

On Wed, 26 Apr 2017 12:42:04 -0500
William Pitcock <nenolod@dereferenced.org> wrote:

> Hello,
> 
> On Wed, Apr 5, 2017 at 11:02 PM, Jens Staal <staal1978@gmail.com> wrote:
> > Arch linux is using grsec on kernel 4.9.
> >
> > https://www.archlinux.org/packages/community/i686/linux-grsec/
> >
> > Perhaps it would be good to ask that maintainer what their plans are.
> > I did not find any new announcements on the grsec web page except the
> > announcement from 2015 where they explicitly say that they still want that
> > the patches are available for the hardened Arch and Gentoo projects.  
> 
> https://grsecurity.net/passing_the_baton.php
> 
> Its official now.  Which means we need to revisit this.  Do we want
> the exposure for 3.6?

I'd like to keep the grsec patch for 3.6. However, we need rename it. I
think we should call it 'linux-hardened'. That way we can remove the
patch later or switch to something else in future.

-nc


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---