Re: [gentoo-hardened] latest kernel exploit patch for vmsplice coming?

[Ned Ludd]

On Mon, 2008-02-11 at 21:45 +0200, Petteri Räty wrote:
> Ned Ludd kirjoitti:
> > On Sun, 2008-02-10 at 23:41 +0200, pageexec@××××××××.hu wrote:
> >
> > More FYI..
> > Hardened is nearly dead in respects to the
> > hardened-profile/hardened-toolchain/hardened-kernel.
> > It does not have to die but we are in a bit of a catch-22.
> > I'm the last dev really watching over those things. Everybody else has
> > retired and moved on in life. I'm starting to do the same. Weekend and
> > evening hobbies of other interest are starting to take priority. So the
> > catch-22 is that hardened needs more devs+proxies and or to be
> > re-evaluated.. The kicker is that I don't really have the spare time to
> > mentor new people. So... Any of you that want to help this project
> > continue. Please stop by #gentoo-hardened on freenode and offer whatever
> > help you can that fit within your skill traits (self motivated ppl++).
> >
> >
>
> Finding mentors should not hold up things. Please contact recruiters if
> you need someone to track down mentors for you.


Thanks very much for this key offering of help. Right now I've filed one
bug for Natanael Copa. 209669 (He's been very helpful over the years and
has recently expressed an interest in becoming a spam target.)

Next on my list would be try to talk Kerin.Miller going from staff to
dev status so he can help with the kernels w/o having to proxy via me.

Lots of people showed up today in #gentoo-hardened offering help. So
many in fact that it's hard to keep up and tell all the people where we
could use the help. But I'll say it again for those that failed to
read/understand what I said the first time. (self motivated++) that
means. If you can think of something that you think could use
improvements then don't wait around for me/others to say it's a good
idea. Just do it. And submit it..

----
PS: For all of you that have been waiting for a fixed vmsplice kernel to
hit the tree. Well you are in luck. Kerin put his patchset together and
I just pushed it to the tree about 30mins ago. So for those of you that
want to help but don't know where to start. I'd say. Go test the
newest .23 kernel in the tree and report feedback to Kerin.

Changes: https://bugs.gentoo.org/207393

* Bump to genpatches-base-2.6.23-9
* Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
* Disables COMPAT_VDSO in x86/defconfig
* Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig

Thanks.. kerframil,PaX Team and all others.


-- 
Ned Ludd <solar@g.o>
Gentoo Linux

-- 
gentoo-hardened@l.g.o mailing list