Re: [gentoo-hardened] Technical repercussions of grsecurity removal

[Daniel Cegiełka]

2017-05-02 18:02 GMT+02:00 Luis Ressel <aranea@×××××.de>:
> On Tue, 2 May 2017 17:56:22 +0200
> Daniel Cegiełka <daniel.cegielka@×××××.com> wrote:
>
>> grep -r -e paxmark -e pax_kernel /usr/portage/
>
> pax.?mark actually, since the eclass helper is called pax-mark. :)
> I'd hold off on removing those for at least a few months, though.
>

If PAX_MPROTECT returns (KSPP?), then ebuilds will need to be
'paxmarked' again. Years of work and PaX support ends in the trash.
Now we see that there is a new level of security: user trust.