1 |
(thanks also to Luis Ressel for clarifications in the other email) |
2 |
|
3 |
(I'm only top posting because this reply of mine has no particularities |
4 |
to place it btwn any lines further below. Otherwise, I don't top post.) |
5 |
|
6 |
Mathias, I only wish to thank you for the quick reply and the tips |
7 |
below. And all my hopes are in you and your team/your contributors |
8 |
(I'm sure there will be great libre people congregating on |
9 |
linux-unofficial_grsec these days and weeks ahead, and longer). Make it |
10 |
as libre as possible! Keep fixing the kernel that Mr Linux wouldn't make |
11 |
secure... Yes, he and his comrades from big business caused this rift. |
12 |
I don't blame spender and PaX Team either.... |
13 |
|
14 |
And about ebuild making, I'll try my best and if I don't break apart in |
15 |
unsuccessful trying, I'll be back with an ebuild to discuss. Or if |
16 |
anybody from Gentoo hardened cares, they can teach us how to do the |
17 |
Gentoo details. |
18 |
|
19 |
(no more new text, only my signature in bottom) |
20 |
|
21 |
On 170508-22:07+0200, Mathias Krause wrote: |
22 |
> On 8 May 2017 at 20:08, Miroslav Rovis <miro.rovis@××××××××××××××.hr> wrote: |
23 |
> > [...] |
24 |
> > But I saw the other link that gives me some hope: |
25 |
> > |
26 |
> > Unofficial forward ports of the last publicly available grsecurity patch |
27 |
> > https://github.com/minipli/linux-unofficial_grsec/tree/linux-4.9.x-unofficial_grsec |
28 |
> > |
29 |
> > which I cloned into my machine. (And I have just spent hours trying to |
30 |
> > fix an ebuild in my custom overlay and install it in my machine, to no |
31 |
> > avail so far, and I'm at the end of my forbearance... A little more below.) |
32 |
> > |
33 |
> > And I wonder: |
34 |
> > |
35 |
> > 1) Are there any guides for non-programmers how to install the: |
36 |
> > |
37 |
> > Merge tag 'v4.9.26' into linux-4.9.x-unofficial_grsec |
38 |
> > https://github.com/minipli/linux-unofficial_grsec/commit/bb9fb983874810ca4167430508e06975af700824?diff=unified |
39 |
> |
40 |
> See below. |
41 |
> |
42 |
> > [...] |
43 |
> > |
44 |
> > 2) How can I check the integrity? I can: |
45 |
> |
46 |
> You figured that one already ;) |
47 |
> |
48 |
> > [...] |
49 |
> > The README.md is plain readme from the kernel, no mention of grsec at |
50 |
> > all... |
51 |
> |
52 |
> ...as it used to be the case for the official grsec patch. So nothing |
53 |
> has changed here. ;) But I can understand your concerns. If you're |
54 |
> used to getting a patch and have to use a git repo now, it's not |
55 |
> intuitive on *how* to make use of it. But, again, see below... |
56 |
> |
57 |
> > |
58 |
> > Where do I get some tips how to install? I do have the git sources, they |
59 |
> > verify fine... I will, hopefully, keep strong and keep trying, but I'm |
60 |
> > not so very sure I am able to craft an ebuild that would work and that |
61 |
> > would install with the local git linux-unofficial_grsec repo... |
62 |
> |
63 |
> I'm not familiar with the gentoo ebuild based package system but I |
64 |
> guess patches integrate more smoothly than git repositories do. So |
65 |
> here's how you generate a patch for the unofficial port for v4.9.27 |
66 |
> (just pushed ;): |
67 |
> |
68 |
> $ git remote update |
69 |
> [update log foo] |
70 |
> $ git diff v4.9.27..v4.9.27-unofficial_grsec > ~/unofficial_grsec-v4.9.27.diff |
71 |
> |
72 |
> If you don't want to clone the git repo you can fetch the patch |
73 |
> directly via the github web interface: |
74 |
> |
75 |
> $ curl https://github.com/minipli/linux-unofficial_grsec/compare/v4.9.27...v4.9.27-unofficial_grsec.diff |
76 |
> > ~/unofficial_grsec-v4.9.27.diff |
77 |
> |
78 |
> The pattern should be intuitive: just change "v4.9.27" for the kernel |
79 |
> version you want to get a patch for (v4.9.25 to v4.9.27 so far). |
80 |
> |
81 |
> The generated patch can be applied on a vanilla Linux v4.9.27 as usual |
82 |
> to generate the unofficial grsec kernel. |
83 |
> |
84 |
> I hope this helps! |
85 |
> |
86 |
> Cheers, |
87 |
> Mathias |
88 |
|
89 |
Regards! |
90 |
-- |
91 |
Miroslav Rovis |
92 |
Zagreb, Croatia |
93 |
https://www.CroatiaFidelis.hr |