From: Javier Juan Martinez Cabezon <tazok.id0@gmail.com>
To: gentoo-hardened@lists.gentoo.org
Subject: Re: [gentoo-hardened] RIP hardened-sources
Date: Sun, 30 Apr 2017 10:15:40 +0200 [thread overview]
Message-ID: <59059D2C.1090707@gmail.com> (raw)
In-Reply-To: <20170429185818.3f9e1cf2@gentp.lnet>
On 29/04/17 18:58, Luis Ressel wrote:
> On Sat, 29 Apr 2017 18:52:56 +0200
> Javier Juan Martinez Cabezon <tazok.id0@gmail.com> wrote:
>
>> It's not one PaX alternative as its only one of its features but rsbac
>> recently implemented native W or X and seems to work fine
>
> If you're only looking for userland W^X, SELinux has some support for
> that, too (I don't know anything about the internal workings, though).
> But grsec/PaX has quite some interesting features beyond that.
>
> Regards,
> Luis
>
I think that if Pipacs want to follow his own way, it's his decision and
we shall respect it.
W or X its implemented in selinux and rsbac, nx gets shipped in recent
systems, but in those computers that haven't nx it couldn't get emulated
without PaX, there are some gcc plugins that emulates some kernel land
PaX features as uderef, vanilla brings some ASLR, maybe not perfect o
weakier buy maybe hardened gentoo could follow this path and could be
coherent with their own way of working, with profiles and specs.
next prev parent reply other threads:[~2017-04-30 8:14 UTC|newest]
Thread overview: 26+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-04-29 11:49 [gentoo-hardened] RIP hardened-sources Luis Ressel
2017-04-29 12:47 ` Alex Efros
2017-04-29 15:56 ` Daniel Cegiełka
2017-04-29 16:52 ` Javier Juan Martinez Cabezon
2017-04-29 16:58 ` Luis Ressel
2017-04-30 8:15 ` Javier Juan Martinez Cabezon [this message]
2017-04-29 17:04 ` Luis Ressel
2017-04-29 18:43 ` Daniel Cegiełka
2017-04-29 20:34 ` "Tóth Attila"
2017-04-29 22:04 ` Brant Williams
2017-04-30 13:00 ` Andrew Savchenko
2017-04-30 13:16 ` Alex Efros
2017-04-30 14:34 ` Andrew Savchenko
2017-04-30 14:56 ` "Tóth Attila"
2017-04-30 13:07 ` Andrew Savchenko
2017-04-29 13:11 ` Alex Efros
2017-04-29 13:46 ` PaX Team
2017-04-29 16:46 ` Alex Efros
2017-04-30 11:08 ` Alex Efros
2017-04-30 11:50 ` SK
2017-04-30 11:55 ` SK
2017-04-30 12:32 ` Andrew Savchenko
2017-04-30 12:56 ` Alex Efros
2017-04-30 13:28 ` Andrew Savchenko
2017-04-30 13:07 ` Daniel Cegiełka
2017-04-29 15:30 ` Paweł Hajdan, Jr.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=59059D2C.1090707@gmail.com \
--to=tazok.id0@gmail.com \
--cc=gentoo-hardened@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox