Re: [gentoo-hardened] Please test hardened-sources 2.6.32-r88 and 3.2.2

[Brian Kroth <bpkroth@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 991 bytes --]

Tom Hendrikx <tom@whyscream.net> 2012-02-02 21:42:
> On 27/01/12 14:37, Anthony G. Basile wrote:
>> Hi everyone,
>>
>> I just added hardened-sources 2.6.32-r88 and 3.2.2 to the tree.  They
>> address CVE-2012-0056.  I've tested and they do indeed resist the
>> exploit.  I will be stabilizing them within 24 hours.  However, I feel
>> very uncomfortable doing so because I don't want to trade one set of
>> problems with another.  If anyone has time to test, let me know if you
>> encounter any issues.
>>
>
> I am still using 2.6.* sources here on one machine pending resolution of
> bug https://bugs.gentoo.org/show_bug.cgi?id=386721 (if it will ever
> happen :/ ).

Are those open-vm kernel modules still necessary?  It was my 
understanding that most/all of the guest modules for more efficient 
virtual hardware support were included in the mainline kernel now:
<http://kernelnewbies.org/Linux_2_6_33#head-b1a0ddbc804d228802ce8aebd37d9fd6513ccb01>

Thanks,
Brian

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 198 bytes --]