[gentoo-dev] Considering dropping the hardened toolchain

[Ned Ludd <solar@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 1306 bytes --]

I really never wanted to send a mail like this but I don't know what
else to do. ;/

Due to low positive feedback and user input I'm considering dropping the
hardened toolchain and retiring from non commercial proactive security
efforts. ie pulling the patches developed that brings you
pie/ssp/relro/now/etc.. Doing otherwise I feel would leave you limping
along, which I feel would be a disservice to everybody. This motivation
stems from bugs that are going unresolved or being improperly fixed and
or filtered. I'm not getting the help I/we need from my own team or the
user community. This is becoming an overwhelming/stressful job for one
person to handle alone on with a user-base this large.

If you wish to see the hardened toolchain continue YOU need to step up
in the next few weeks and offer help (ie we need 2-3 really good
people).

Mail me off list for more details if your interested in helping.
A fair to strong understanding is needed of entire toolchain process.
Desired is somebody(s) that preferably also understands ELF and multi
arch assembly that wishes to see the solution developed to it's fullest
as per the goals outlined in the PaX documentation.

-- 
Ned Ludd <solar@gentoo.org>
Gentoo (hardened,security,infrastructure,embedded,toolchain) Developer

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]