[gentoo-dev] Security patches

[gentoo-dev] Security patches

[P.Gnodde]

Hi all,

I've noticed a lot of people are interested in security patches for the gentoo kernel. I've been busy integrating a couple of nice patches in the gentoo 2.4.18 kernel and here are the results.

http://www.pcswebdesign.nl/patches/util-linux-2.11l-crypto.patch.gz
http://www.pcswebdesign.nl/patches/linux-2.4.18-gentoo-secure.patch.gz

The first is the util-linux patch of the kerneli project, but upgraded to the util-linux-2.11l package (I've used the stock package, but I cannot remember if the gentoo util-linux has been patched). It makes losetup, mount and umount to work with encrypted filesystems.

The second patch is a collection, it includes the kerneli patch (encrypted filesystems), rml's netdev-random patches (lets netwerk devices contribute to the random entropy) and the grsecurity patch (version 1.9.4).
It should apply cleanly to the gentoo 2.4.18 kernel.

NOTE: The grsecurity patch had a couple of tricky failed hunks, so it could be unstable! I am running a stability test at this moment and should know more about the stability after the weekend, be careful when using it!

I hope you have some use for these patches and use them wisely :).

Regards,

Peter Gnodde