MIME-Version: 1.0
References: <CABbU2U-w34QfSGg4wZKxvCoYgtqLRj9Z0SKHipDPNaSdHdBeAQ@mail.gmail.com>
 <20200331120229.514f90b3@ncopa-desktop.copa.dup.pw> <CABbU2U98GbHZZWxnOoJ=m1FDLm0FXUE9Pcobg2aGFFK3kDbKqw@mail.gmail.com>
 <20200331123006.18d9621d@ncopa-desktop.copa.dup.pw>
In-Reply-To: <20200331123006.18d9621d@ncopa-desktop.copa.dup.pw>
From: Marco Sulla <alpine_users_list@marco.sulla.e4ward.com>
Date: Tue, 31 Mar 2020 15:47:01 +0200
Message-ID: <CABbU2U-5LJCGcvEHug34xXp6t1BkmdUs5qsW=T31_1aAYrSjgg@mail.gmail.com>
Subject: Re: How does Alpine Linux harden its kernel?
To: Natanael Copa <ncopa@alpinelinux.org>,
	alpine-user.lists.alpinelinux.org-alpine_users_list.marco.sulla.e4ward.com@jr6e1x1pth7.reply.e4ward.com
Content-Type: text/plain; charset="UTF-8"
Reply-To: alpine_users_list@marco.sulla.e4ward.com
Sender: forwardedby@e4ward.com

Thank you for the information. I have no intention to apply a patch to
the linux kernel which code is not publicly available.

On Tue, 31 Mar 2020 at 12:30, Natanael Copa <ncopa@alpinelinux.org> wrote:
>
> On Tue, 31 Mar 2020 12:10:47 +0200
> Marco Sulla <alpine_users_list@marco.sulla.e4ward.com> wrote:
>
> > But did you not apply custom patches made by yourselves? I see that in
> > the source code that pax utilities are used. And it seems Apline use
> > linux-hardened.
>
> We used the testing patches from grsecurity and maintained our own fork
> of it for a while. But it was not possible to continue at some point
> (which was expected). Now we have dropped the linux-hardened kernel in
> favor of the vanilla linux-lts.
>
> I recommend that you ask (and pay for) grsecurity for a proper hardened
> kernel.
>
> -nc
>
> >
> > On Tue, 31 Mar 2020 at 12:02, Natanael Copa <ncopa@alpinelinux.org> wrote:
> > >
> > > On Tue, 31 Mar 2020 11:43:01 +0200
> > > Marco Sulla <alpine_users_list@marco.sulla.e4ward.com> wrote:
> > >
> > > > Hello all. I discovered Alpine Linux, and it seems the unique active
> > > > Linux distro that applies hardening patches to the Linux kernel.
> > > >
> > > > The problem is I do not understand where Alpine applies its patches to
> > > > the kernel. Where is the code?
> > > >
> > > > PS: I know that Alpine Linux does not use anymore grsecurity. Does it
> > > > continue to apply PaX patches?
> > >
> > > Hi!
> > >
> > > We no longer harden the kernel, due to grsecurity nor pax not being
> > > available for public.
> > >
> > > It sounds like we need to update the documentation somewhere.
> > >
> > > -nc
>