MIME-Version: 1.0
References: <CABbU2U-w34QfSGg4wZKxvCoYgtqLRj9Z0SKHipDPNaSdHdBeAQ@mail.gmail.com>
 <20200331120229.514f90b3@ncopa-desktop.copa.dup.pw>
In-Reply-To: <20200331120229.514f90b3@ncopa-desktop.copa.dup.pw>
From: Marco Sulla <alpine_users_list@marco.sulla.e4ward.com>
Date: Tue, 31 Mar 2020 12:10:47 +0200
Message-ID: <CABbU2U98GbHZZWxnOoJ=m1FDLm0FXUE9Pcobg2aGFFK3kDbKqw@mail.gmail.com>
Subject: Re: How does Alpine Linux harden its kernel?
To: Natanael Copa <ncopa@alpinelinux.org>,
	alpine-user.lists.alpinelinux.org-alpine_users_list.marco.sulla.e4ward.com@jr6e1x1pth7.reply.e4ward.com
Content-Type: text/plain; charset="UTF-8"
Reply-To: alpine_users_list@marco.sulla.e4ward.com
Sender: forwardedby@e4ward.com

But did you not apply custom patches made by yourselves? I see that in
the source code that pax utilities are used. And it seems Apline use
linux-hardened.

On Tue, 31 Mar 2020 at 12:02, Natanael Copa <ncopa@alpinelinux.org> wrote:
>
> On Tue, 31 Mar 2020 11:43:01 +0200
> Marco Sulla <alpine_users_list@marco.sulla.e4ward.com> wrote:
>
> > Hello all. I discovered Alpine Linux, and it seems the unique active
> > Linux distro that applies hardening patches to the Linux kernel.
> >
> > The problem is I do not understand where Alpine applies its patches to
> > the kernel. Where is the code?
> >
> > PS: I know that Alpine Linux does not use anymore grsecurity. Does it
> > continue to apply PaX patches?
>
> Hi!
>
> We no longer harden the kernel, due to grsecurity nor pax not being
> available for public.
>
> It sounds like we need to update the documentation somewhere.
>
> -nc