From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 3A113139694 for ; Fri, 23 Jun 2017 16:47:21 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 9C27D234046; Fri, 23 Jun 2017 16:47:17 +0000 (UTC) Received: from mail-lf0-x244.google.com (mail-lf0-x244.google.com [IPv6:2a00:1450:4010:c07::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 320F123402F for ; Fri, 23 Jun 2017 16:47:17 +0000 (UTC) Received: by mail-lf0-x244.google.com with SMTP id u62so7229937lfg.0 for ; Fri, 23 Jun 2017 09:47:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=date:from:to:subject:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=VoOBJ/qu8EMM9/63LCUnUQ43YLJMHeByOkpsZ+WPS5I=; b=kkGhMHCy5afCflYIxnuE+QTy5CvlHcqw/1ihj4m5fe9gNr+ZeGFhL2qD/QlcLq0hMW nrXo9hsT+jubrmuic6oIYy2J02s1PFfzWm7rSx5r/EAogGz7hbKzbMHh8XaA88Q2I/o2 rtL/bftE5vMoLsoeJmTCHhg/ktlGdw7+sL8xFkkQ6QYfpZcc8SVE/P8HI/GRFCc157er i3o71FmKfRRweoORnYRB0jJNbgqNrOjZoXoXbKxPcyH49ku58TncHVB2K0N8iUFp28Bg 0huKpI4DmSMlG/w1OvbFUZwuKXaA/z+eOoSU9AFIqbnX9+PEbRk5ZyNqeTm8Trnvb/0d CFYA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=VoOBJ/qu8EMM9/63LCUnUQ43YLJMHeByOkpsZ+WPS5I=; b=qmbc3NHOEvQGhCizxJZ4RXQhSCZLpM14i9668Ims2GZD4J4gb/drWTU1L3Mnb+fMMf sBEEtnlq6n9/57fjotXEdrlk7iFx0gFZEBQMGmaE+v8zGxuSwEEJr/s1r+yJ1r0Ldoqk 36kLDz60KJ9wb9HxP4N2T7YZtKuxJy6Bu58p3jDBdEENQEEC8XDQwBuAFtP26AKgFxfP +DLUtRKUu9Wfkl8nJbNNk4ZJAkI6IJ7F8vs9YIcUVk3fzmcNH36jygJcioppmEiJ8Arq zun2sp/d3opLnu+mDL0NA08wVqKZ4QoGzxd6+x432qC0vvGz+vlCYy0jTYiaNglhOSv/ 9BFg== X-Gm-Message-State: AKS2vOwvM3u6pSBM/TN0XX2hVRiymPUO8HADs3YhwaX/Koh5Hp1fbseF 6I/E9SmnYf6+tHX04jI= X-Received: by 10.80.177.209 with SMTP id n17mr6656765edd.177.1498236435298; Fri, 23 Jun 2017 09:47:15 -0700 (PDT) Received: from mechanicum.chadwicks.me.uk (mail.oesys.co. [82.71.11.172]) by smtp.gmail.com with ESMTPSA id b30sm3030913edd.6.2017.06.23.09.47.14 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Fri, 23 Jun 2017 09:47:15 -0700 (PDT) Date: Fri, 23 Jun 2017 18:47:03 +0100 From: Kevin Chadwick To: gentoo-hardened@lists.gentoo.org Subject: Re: [gentoo-hardened] The status of grsecurity upstream and hardened-sources downstream Message-ID: <20170623184138.75e6c598@mechanicum.chadwicks.me.uk> In-Reply-To: References: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Archives-Salt: 9e07f34e-16ab-4934-8236-2fb32250ab1c X-Archives-Hash: 9c582a1ebfed1cb4616d08b063465bca On Fri, 23 Jun 2017 12:28:27 -0400 > My plan then is as follows. I'll wait one more month and then send > out a news item and later mask hardened-sources for removal. I don't > recommend we remove any of the machinery from Gentoo that deals with > PaX markings. > > I welcome feedback. I won't mention the OS I love but tend to avoid linux almost completely these days since the systemd invasion on binary distros but also because modern Windows has more default kernel hardening features than upstream Linux (binary packaged kernels). Hardened Gentoo is among the best. I am sorry to hear this? I hope it will resolve itself more satisfactorily, eventually. Good luck and regards, Kc