[gentoo-dev] grsecurity and the gentoo 2.4.18 kernel

[gentoo-dev] grsecurity and the gentoo 2.4.18 kernel

[Einar Karttunen]

Hello

It seems that the grsecurity patch fails
on 8 files against the gentoo 2.4.18 kernel.
>From the affected files two are makefiles
and two are headers and thus easy to fix.
The four remaining files are source code
and would need someone with knowledge about
the kernel to fix them.

Is a kernel with grsecurity patch planned in
the near future?

- Einar Karttunen

Re: [gentoo-dev] grsecurity and the gentoo 2.4.18 kernel

[P.Gnodde]

Hi,

> The four remaining files are source code
> and would need someone with knowledge about
> the kernel to fix them.
I have the grsecurity patch integrated in the gentoo 2.4.18 kernel and fixed the failed chunks, but I went on patching that tree and now it fails to compile for no apperent reason :). But the kernel with kerneli and grsecurity patches compiled fine, when I tested it. I'll set up another tree and apply grsecurity again and send you an updated patch when I get back from work :).

But while fixing the failed chunks, I did notice that there _could_ be some conflicts between POSIX ACLs and grsecurity ACLs, but I do not use ACLs yet, so I would not know if there _are_ conflicts.

> Is a kernel with grsecurity patch planned in
> the near future?
There are some plans about a secure gentoo profile, read back in the archives :).

Regards,

Peter Gnodde