Re:Linux kernel: multiple x86_64 vulnerabilities
by pakled_engineer on Wednesday December 17, 2014 @06:47PM
(#8765200)
Does systemd even work w/patched grsec kernel? Last I heard Spender was considering writing a security module to get deep hooks into the kernel to handle systemd, so I assumed systemd killed off any hope of more grsec/pax patches making it upstream.
[ Parent
| on HN ]
Re:Linux kernel: multiple x86_64 vulnerabilities
by zanny on Wednesday December 17, 2014 @10:09PM
(#8765808)
I've tried running the grsec kernel on Arch a few times, and I've never gotten it to boot once, it usually just panics immediately. In the same way openSSL was a base of nobody wanting to invest in covering your own ass, there is no interest in having a legitimately secure kernel the way grsec proposes, and even in Arch there are only a few people working on it and while it is in the official repos it really should be in the stock kernel if they wanted to send a message.