Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <564ADA32.5040708@gmail.com>
Date: Tue, 17 Nov 2015 02:41:38 -0500
From: Daniel Micay <danielmicay@...il.com>
To: kernel-hardening@...ts.openwall.com
Subject: Re: 

On 16/11/15 07:13 AM, Richard Weinberger wrote:
> On Mon, Nov 16, 2015 at 6:33 AM, Daniel Micay <danielmicay@...il.com> wrote:
>> On 15/11/15 03:59 PM, Richard Weinberger wrote:
>>> On Fri, Nov 13, 2015 at 4:43 PM, west suhanic <west.suhanic@...il.com> wrote:
>>>> Hello All:
>>>>
>>>> I am a hardened gentoo user. How can we get the grsecurity code into the
>>>> kernel?
>>>
>>> As soon all downsides and drawbacks are identified/resolved.
>>> Which basically means that we have to redo a lot (it not all).
>>
>> You might not be familiar with the grsecurity/PaX features and their
>> implementations but lots of people are. It's not unexplored territory
>> without known trade-offs. It has active developers who are happy to
>> answer questions about it (within reason).
> 
> I'll kindly ignore this personal attack.

I didn't mean this as a personal attack. I just found that statement to
be off i.e. it seems to imply that PaX/grsecurity are low quality and
that they need to be improved to upstream them, when IMO what really
needs to happen to just making the features more politically acceptable
even if it ends up making them harder to implement / less useful.


Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.