From: "V.Krishn" <vkrishn4@gmail.com>
Reply-To: vkrishn4@gmail.com
To: alpine-devel@lists.alpinelinux.org
Subject: Re: [alpine-devel] grsec go or no-go call for 3.6
Date: Mon, 1 May 2017 15:32:48 +0530
User-Agent: KMail/1.13.7 (Linux/3.9.6-64; KDE/4.8.4; x86_64; ; )
References: <CA+T2pCEdrM4iLKgA3phGLnpRA5Jo09nVEp5vsT6TKXPEgCOfdw@mail.gmail.com> <20170427154956.GA6880@angua.1042.ch> <ACD308E0-D424-4DDD-B37B-FBFF9E061F4C@shiz.me>
In-Reply-To: <ACD308E0-D424-4DDD-B37B-FBFF9E061F4C@shiz.me>
Precedence: list
MIME-Version: 1.0
Content-Type: Text/Plain;
  charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Message-Id: <201705011532.49139.vkrishn4@gmail.com>

> Not viable as machine count is part of the subscription count, which we
> can=E2=80=99t predict. We also can=E2=80=99t redistribute the patch or th=
e subscription
> will be terminated.
>=20
> Personally I vote for maintaining grsec for 3.6 and renaming it.
> For the 3.6 releases cycle, we should be reasonably able to maintain the
> patch against 4.9 LTS. We have to revisit this for 3.7+, preferably soon
> after as 3.6 is released, though.

If dormant project like this can raise such a sum, I am sure a security=20
project (close to kernel) can even larger.
eg. http://www.phoronix.com/scan.php?page=3Dnews_item&px=3DRoundCube-Next-
Silent-2017

Not sure what game is at play, but after small overview of other LSM/Non-LS=
M=20
stackable/non-stackable projects, I think grsec should be kept alive atleas=
t=20
for 3 yrs or so (irrespective of alpinelinux uses it)
If original author does not like the idea of such crowdfunding, maybe it=20
should be given a try by community/devs that forks it.

=2D-=20
Regards.
V.Krishn

>=20
> - Shiz
>=20
> > On 27 Apr 2017, at 17:49, Jean-Louis Fuchs <ganwell@fangorn.ch> wrote:
> >=20
> > Hi
> >=20
> > On Wed, Apr 26, 2017 at 09:02:42PM +0200, Natanael Copa wrote:
> >> I'd like to keep the grsec patch for 3.6. However, we need rename it. I
> >> think we should call it 'linux-hardened'. That way we can remove the
> >> patch later or switch to something else in future.
> >=20
> > Could we actually find a sponsor and get a subscription? I mean the
> > source is GPL after all.
> >=20
> > Best,
> >=20
> >    Jean-Louis


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---