1 |
There is Subgraph that is going to keep maintaining 4.9.X LTS branch |
2 |
with grsec & there is minipli[1] that is going to forward 4.9.X LTS |
3 |
branch with grsec. |
4 |
|
5 |
Would be great to join forces to keep 4.9.X LTS alive while porting |
6 |
features upstream. |
7 |
|
8 |
1. |
9 |
https://github.com/minipli/linux-unofficial_grsec/tree/linux-4.9.x-unofficial_grsec |
10 |
|
11 |
|
12 |
On 05/01/2017 03:58 PM, Sven Vermeulen wrote: |
13 |
|
14 |
> On Mon, May 01, 2017 at 01:28:54PM +0300, Andrew Savchenko wrote: |
15 |
>>> The obvious step is indeed to stop further *current* development on |
16 |
>>> hardened-sources. |
17 |
>> Why not support hardened-sources while corresponding vanilla |
18 |
>> kernels are still supported? E.g. 4.9 is a longterm branch, so we |
19 |
>> should be able to keep hardened-sources-4.9* up-to-date with |
20 |
>> vanilla bugfixes. This will give a nice transition period for |
21 |
>> hardened users. |
22 |
> Transition to what exactly? |
23 |
> |
24 |
> There is one suggestion that mentions we would join forces with other |
25 |
> projects "out there" to keep supporting the latest PaX patches. But this |
26 |
> will require knowledgeable resources with enough time to do the necessary |
27 |
> support on it. |
28 |
> |
29 |
> In my humble opinion, this is an effort which is not to be underestimated. |
30 |
> Maintaining the upstream-provided patches within Gentoo is already an |
31 |
> endeavour, and now we're talking about even taking on the patch content |
32 |
> itself as well. |
33 |
> |
34 |
> If we have enough volunteers to do so, then let's do it. At least we can |
35 |
> then have something for users to look forward to. If not, then the current |
36 |
> long-term branch is also the latest, and the "transition period" is to allow |
37 |
> users to move to a perhaps lesser kernel-hardened environment. |
38 |
> |
39 |
> Wkr, |
40 |
> Sven Vermeulen |
41 |
> |