Gentoo Archives: gentoo-hardened

From: Mike Rellion <m.rellion@×××××.com>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] latest kernel exploit patch for vmsplice coming?
Date: Sun, 10 Feb 2008 22:29:49
Message-Id: dd5564a50802101429h7c54dabfi280012b55d0e50cc@mail.gmail.com
1 With this latest root exploit getting a lot of attention will we get a
2 hardened patch for this soon?
3
4 There is a runtime fix at:
5 http://www.ping.uio.no/~mortehu/disable-vmsplice-if-exploitable.c but grsec
6 sadly prevents the runtime fix from running for those of us running it as it
7 denies kmem writing. We could recompile without grsec to apply this runtime
8 patch but that is certainly a hack.
9
10 ~Mike

Replies