Precedence: list
MIME-Version: 1.0
In-Reply-To: <20170426210242.441cde5e@ncopa-macbook.copa.dup.pw>
References: <CA+T2pCGaas_84oGi-JvKH2+8xhpyjrfTUakFvv0wEczTJTN_Pg@mail.gmail.com>
 <6cb1b9fe292e94575683ea97bafe2c61@alpinelinux.org> <CA+T2pCEdrM4iLKgA3phGLnpRA5Jo09nVEp5vsT6TKXPEgCOfdw@mail.gmail.com>
 <20170405220743.0fb80170@ncopa-desktop.copa.dup.pw> <ef7a7202-131f-7832-5960-9fe31ec65998@it-offshore.co.uk>
 <CAK8RtFqC0EMcv1qGmDTFvnn5O0C+wzLBCKO+5Qd6nAjEw3JydA@mail.gmail.com>
 <CAK8RtFoWbt6VoTQuhGHivyCnfQk_U7ovvp1KtDxDMoA=AyUbMA@mail.gmail.com>
 <CAK8RtFr7FD0VgAy=qghRgYt2pcA-n7H=+Ct5Z-+w-dGRDr2iqQ@mail.gmail.com>
 <CAK8RtFofLuq2FWu3iV_dEDmMR7hfdhn2kYTDy9zC7TkZctCydA@mail.gmail.com>
 <CAK8RtFrHJL+5mQxMHx+OYePeQJrnErdToUNELeWd-C8H28iP6A@mail.gmail.com>
 <CA+T2pCFa0VteSPtV-VN5TTkGqUP5P6d=UD7zSVH0swC9KXqY0w@mail.gmail.com> <20170426210242.441cde5e@ncopa-macbook.copa.dup.pw>
From: William Pitcock <nenolod@dereferenced.org>
Date: Thu, 27 Apr 2017 01:34:23 -0500
Message-ID: <CA+T2pCGThx5YPzNUgcCjpSy0rddx+wCQYyEPOAhAuCcTZr+njw@mail.gmail.com>
Subject: Re: [alpine-devel] grsec go or no-go call for 3.6
To: Natanael Copa <ncopa@alpinelinux.org>
Cc: Jens Staal <staal1978@gmail.com>, IT Developer <developer@it-offshore.co.uk>, 
	alpine-dev <alpine-devel@lists.alpinelinux.org>
Content-Type: text/plain; charset=UTF-8

Hello,

On Wed, Apr 26, 2017 at 2:02 PM, Natanael Copa <ncopa@alpinelinux.org> wrote:
> On Wed, 26 Apr 2017 12:42:04 -0500
> William Pitcock <nenolod@dereferenced.org> wrote:
>
>> Hello,
>>
>> On Wed, Apr 5, 2017 at 11:02 PM, Jens Staal <staal1978@gmail.com> wrote:
>> > Arch linux is using grsec on kernel 4.9.
>> >
>> > https://www.archlinux.org/packages/community/i686/linux-grsec/
>> >
>> > Perhaps it would be good to ask that maintainer what their plans are.
>> > I did not find any new announcements on the grsec web page except the
>> > announcement from 2015 where they explicitly say that they still want that
>> > the patches are available for the hardened Arch and Gentoo projects.
>>
>> https://grsecurity.net/passing_the_baton.php
>>
>> Its official now.  Which means we need to revisit this.  Do we want
>> the exposure for 3.6?
>
> I'd like to keep the grsec patch for 3.6. However, we need rename it. I
> think we should call it 'linux-hardened'. That way we can remove the
> patch later or switch to something else in future.

I took care of this in edge/3.6 already.  Whenever the current blocks
on the builders are resolved, this should go in fine.
It passed a local rebuild anyway.

When people upgrade their system, it will transition them to
linux-hardened if they have linux-grsec as soon as it lands.

William


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---