Gentoo Archives: gentoo-hardened

From: "Tóth Attila" <atoth@××××××××××.hu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Technical repercussions of grsecurity removal
Date: Tue, 02 May 2017 17:23:57
Message-Id: 10cb5e0cdaf9fdde9bcf74e803be66c8.squirrel@atoth.sote.hu
In Reply to: Re: [gentoo-hardened] Technical repercussions of grsecurity removal by "Daniel Cegiełka"
1 2017.Május 2.(K) 18:59 időpontban Daniel Cegiełka ezt írta:
2 >> pax.?mark actually, since the eclass helper is called pax-mark. :)
3 >> I'd hold off on removing those for at least a few months, though.
4 >>
5 >
6 > If PAX_MPROTECT returns (KSPP?), then ebuilds will need to be
7 > 'paxmarked' again. Years of work and PaX support ends in the trash.
8
9 I must aggree here. If there will be an alternative implementation marking
10 may regain its meaning. The same binaries need to be marked in some way or
11 another. I wouldn't simply dump it unless it would disturb some
12 functionality.
13
14 Regards: Dw.
15 --
16 dr Tóth Attila, Radiológus, 06-20-825-8057
17 Attila Toth MD, Radiologist, +36-20-825-8057

Replies

Subject Author
Re: [gentoo-hardened] Technical repercussions of grsecurity removal "Daniel Cegiełka" <daniel.cegielka@×××××.com>