Gentoo Archives: gentoo-hardened

From: "Anthony G. Basile" <blueness@g.o>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] BFS scheduler and GRSEC/PaX patches
Date: Thu, 31 Mar 2011 18:04:06
In Reply to: Re: [gentoo-hardened] Hardened meeting log 2011-03-23 20:00 UTC by "Anthony G. Basile"
Hi everyone,

I've merged together the BFS scheduler patch by Con Kolivas [1], and the
grsecurity patch[2].  There were some innocent mismatches and some not
so innocent.  I hacked up the BFS patch so that it applies *after* the
hardened-sources patches which includes the grsecurity patch.

You can get the hacked up BFS patch at


These are only available for 2.6.38.  To apply, first

	emerge =sys-kernel/hardened-sources-2.6.38

then cd into /usr/src/linux-2.6.38-hardened and

	patch -p 1 < /path-to/hardened-bfs-2.6.38.patch

Compile and enjoy(?)  WARNING: This is untested in the wild.  It works
on in a VM but should be considered unstable.  Let me know if your
system doesn't blow up.

For those of you unfamiliar, BFS scheduler reduces latency on desktop
systems, especially under heavy load.  So now you can run your desktop
fast and hard.  (I'm sure there's a bad pun in there somewhere :)



Anthony G. Basile, Ph.D.
Gentoo Developer