From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 6740A1384C3 for ; Sat, 5 Sep 2015 13:55:37 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8EB03142CF; Sat, 5 Sep 2015 13:55:35 +0000 (UTC) Received: from virtual.dyc.edu (mail.virtual.dyc.edu [67.222.116.22]) by pigeon.gentoo.org (Postfix) with ESMTP id EA5D214275 for ; Sat, 5 Sep 2015 13:55:34 +0000 (UTC) Received: from greysprite.dite (cpe-74-77-145-97.buffalo.res.rr.com [74.77.145.97]) by virtual.dyc.edu (Postfix) with ESMTPSA id 514797E0086 for ; Sat, 5 Sep 2015 09:55:34 -0400 (EDT) Subject: Re: [gentoo-hardened] The state of grsecurity in gentoo To: gentoo-hardened@lists.gentoo.org References: <55E7202D.7080402@opensource.dyc.edu> <20150905094423.GE14064@schiffbauer.net> From: "Anthony G. Basile" Message-ID: <55EAF455.4070101@opensource.dyc.edu> Date: Sat, 5 Sep 2015 09:55:33 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: <20150905094423.GE14064@schiffbauer.net> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-Archives-Salt: d8e1394d-1237-478b-906f-07dd6c1b840f X-Archives-Hash: 2ad8a5dac2884b9639cc4f816c678d01 On 9/5/15 5:44 AM, Marc Schiffbauer wrote: > * Anthony G. Basile schrieb am 02.09.15 um 18:13 Uhr: >> Hi everyone, >> >> So by now most people have heard the news that the Grsecurity/PaX team >> are no longer going to be making their stable patches available. The >> reason is that they are in dispute with a certain embedded systems >> vendor and those negotiations broke down. So they decided to make their >> stable patches only available to the sponsors. [1] >> >> What does this mean for Gentoo? > [...] > > Anthony, > > patches are available until 9th. Could you leave the latest 3.14 > version in tree? Or do you plan to unpublish them in the tree, too? > Would spender or pipacs want or welcome that we do this? > > TIA > -Marc > I'm not sure yet how I will deprecate but I think I have to. Upstream thinks I'm too slow at deprecating already. They push out daily patches and we want to stabilize after a month. Try balance that out! -- Anthony G. Basile, Ph. D. Chair of Information Technology D'Youville College Buffalo, NY 14201 (716) 829-8197