How is this a good thing? Any more info? Will it be under a copyleft-style patent license?
The situation with Wind River is one of the reasons why the grsecurity stable patch is no longer publicly available, though, TBF, Wind River wasn't the only violator. They were more like the last straw, after they (grsecurity) had dealt with a bunch of other people using their work in the same way. And regardless of how the court claim would have gone -- honestly it's all a bit sad to me, given the only thing they've asked is you just don't call it grsecurity or whatever if you're not paying. Distros like Alpine and CopperheadOS have been doing just fine for a long time this way, it doesn't seem hard at all to play nice...
[1] I believe one of the Wind River employees was even ballsy enough to go onto the grsecurity forums and ask for technical help with part of the patches, and debugging them. As you can imagine, this did not go over very well, at all.
- What the #@$% is RAP:
https://grsecurity.net/rap_announce.php
"a patent pending defense mechanism against code reuse attacks. RAP was announced (...) in October 2015 (...). RAP is the result of our (..) development (...) by PaX. (...) minimal performance impact."
"For a technical deep-dive into RAP, please read the PaX Team's (...) 2015 presentation:"
https://pax.grsecurity.net/docs/PaXTeam-H2HC15-RAP-RIP-ROP.p...
- What is PaX and who is PaX team:
https://en.wikipedia.org/wiki/PaX
"PaX is a patch for the Linux kernel that implements least privilege protections for memory pages."
"PaX is maintained by The PaX Team, whose principal coder is anonymous."