Received: from nwk.e4ward.com (nwk.e4ward.com [173.255.225.96]) by nld3-dev1.alpinelinux.org (Postfix) with ESMTPS id 2FCBA781A65 for ; Tue, 31 Mar 2020 09:43:48 +0000 (UTC) Received: from localhost (nwk.e4ward.com [127.0.0.1]) by nwk.e4ward.com (Postfix) with ESMTP id E67AB87A1B for ; Tue, 31 Mar 2020 05:43:46 -0400 (EDT) Authentication-Results: nwk.e4ward.com (amavisd-new); dkim=pass (1024-bit key) reason="pass (just generated, assumed good)" header.d=e4ward.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=e4ward.com; h= reply-to:content-type:content-type:subject:subject:message-id :date:date:from:from:mime-version; s=mail; t=1585647826; x= 1585734227; bh=yOu+23fZtGcMAszKmR7Q4nXRERmFXIyzQaE0lRbReN8=; b=P IZxsUTVQPdDm59Psspe8c/BIPSIENVS8ZvvvKJsC/w5Q7ECCUSHBCwyXR0hIHkZr 1doDCnLsztzBDIgAHmfXxqMosmHAjQvi+7J0ewfmRiHynvlu1fHLoAuZt55Pu/02 hqndq0xYti0OgkSEM6lqg6+epvQ0BK0Rulhr/gDQMM= Authentication-Results: nwk.e4ward.com (amavisd-new); dkim=fail (2048-bit key) reason="fail (message has been altered)" header.d=gmail.com Received: from nwk.e4ward.com ([127.0.0.1]) by localhost (nwk.e4ward.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ix2c2QgCWJYK for ; Tue, 31 Mar 2020 05:43:46 -0400 (EDT) Received: from nwk.e4ward.com (nwk.e4ward.com [127.0.0.1]) by nwk.e4ward.com (Postfix) with ESMTP id EB75E87A0D for ; Tue, 31 Mar 2020 05:43:45 -0400 (EDT) Received: from mail-lj1-f177.google.com (mail-lj1-f177.google.com [209.85.208.177]) by nwk.e4ward.com (Postfix) with ESMTPS for ; Tue, 31 Mar 2020 05:43:45 -0400 (EDT) Received: by mail-lj1-f177.google.com with SMTP id k21so21312006ljh.2 for ; Tue, 31 Mar 2020 02:43:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=yOu+23fZtGcMAszKmR7Q4nXRERmFXIyzQaE0lRbReN8=; b=KfpUam45Q0aYp0ID29oEbR+ZWwBPQjTS+L41XVgsvJznIyVHdEOHOLk6qZtR971/TR UfvZL0lR2/w9yiVCnNKoTDa1usQieKzahL5QiHbKb//SkUDjVC0CdQOfTW0xjiAT7lrf d05F4FZMh4xoC84vImr12qbRRod4ZiQ+C9WSlwyN7Y3TNnFry7cbhccEOkHDBUDidn12 IHP8IbcOO6tAiQp8PekBhGPlOn6N42gnTwJtowWS0efJG9jMnzYLiY2DIkO03hosPzk6 K48zyRO3cx9ZXEAm6Zts4IJFPpLseIbwPxBLefRx8FVBV4f7JvXm7hKNBi8iD2VzzPUm RBxw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=yOu+23fZtGcMAszKmR7Q4nXRERmFXIyzQaE0lRbReN8=; b=fdrjsp6rstMyZHNIaZrYnP39e5GySZsCIU2Ubpo1W0J9U8CLxdRpDkph1hWpAjgeE+ Nb9GMbY9ERSxY1xzzhx8kviXR9TaiaocX7V6EGMPq4rirVnTItWB+Lwgw3096MkM5D9n WHdt2nBQBIZKrWl3kTCsdBIAIWFcG2pMz7SGwh+sHmPKBDNWnk6GpXOwrI9w7ObjKdqD Ls/ikU/Bp3bc22cArCDa6Ud4VAmH1n3rEsaPlgTmRAahqfPuPgfIlulbsXz6tLFofU0R 3cubWV3VfbYCL8vvKhsFLk3BYd6FmnxRBOOLwBmtdiC+2yPALyiaOKWoXQl6XTLWqoEc BFBw== X-Gm-Message-State: AGi0PuZuH7VoeG0vi1QBnfznfrbDR68yHv2/2HSYDj/e7zPBq/P1h9oP DP37v/m3fd7/rBqGxSHjVwX1UF2IO1OOwrbkfYG2Pw== X-Google-Smtp-Source: APiQypJe9PmxXzjtw1ZtQRToLUZyK0qQGn3Wr1xhBSshz8PjVCWdf2fNN44NCETaicSzWCyAnxTG8vp93W2Ppud3gAw= X-Received: by 2002:a2e:8746:: with SMTP id q6mr7142770ljj.13.1585647817529; Tue, 31 Mar 2020 02:43:37 -0700 (PDT) MIME-Version: 1.0 From: Marco Sulla Date: Tue, 31 Mar 2020 11:43:01 +0200 Message-ID: Subject: How does Alpine Linux harden its kernel? To: alpine-user@lists.alpinelinux.org Content-Type: text/plain; charset="UTF-8" Reply-To: alpine_users_list@marco.sulla.e4ward.com Sender: forwardedby@e4ward.com X-e4ward-RCPT: alpine-user.lists.alpinelinux.org-alpine_users_list.marco.sulla.e4ward.com@jr6e1x1pth7.reply.e4ward.com X-e4ward-x: . Hello all. I discovered Alpine Linux, and it seems the unique active Linux distro that applies hardening patches to the Linux kernel. The problem is I do not understand where Alpine applies its patches to the kernel. Where is the code? PS: I know that Alpine Linux does not use anymore grsecurity. Does it continue to apply PaX patches?