The officially official Devuan Forum!

You are not logged in.

#26 2018-08-10 13:26:16

miroR
Member
From: Zagreb, Croatia
Registered: 2016-11-30
Posts: 217  
Website

Re: Grsecurity/Pax installation on Devuan GNU/Linux

https://www.croatiafidelis.hr/gnu/deb/l … 180810-06/
see previous posts for how to install it and other.

Last edited by miroR (2018-08-10 13:27:00)


Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

Offline

#27 2018-08-17 19:42:22

miroR
Member
From: Zagreb, Croatia
Registered: 2016-11-30
Posts: 217  
Website

Re: Grsecurity/Pax installation on Devuan GNU/Linux

https://www.croatiafidelis.hr/gnu/deb/l … 180816-16/
see previous posts for how to install it and other.


Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

Offline

#28 2018-08-21 03:51:09

miroR
Member
From: Zagreb, Croatia
Registered: 2016-11-30
Posts: 217  
Website

Re: Grsecurity/Pax installation on Devuan GNU/Linux

https://www.croatiafidelis.hr/gnu/deb/l … 180820-16/
see previous posts for how to install it and other.


Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

Offline

#29 2018-09-14 18:23:13

miroR
Member
From: Zagreb, Croatia
Registered: 2016-11-30
Posts: 217  
Website

Re: Grsecurity/Pax installation on Devuan GNU/Linux

https://www.croatiafidelis.hr/gnu/deb/l … 180914-10/
see previous posts for how to install it and other.

Last edited by miroR (2018-09-14 18:24:28)


Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

Offline

#30 2018-09-24 10:40:11

miroR
Member
From: Zagreb, Croatia
Registered: 2016-11-30
Posts: 217  
Website

Re: Grsecurity/Pax installation on Devuan GNU/Linux

https://www.croatiafidelis.hr/gnu/deb/l … 180924-07/
see previous posts for how to install it and other.

Last edited by miroR (2018-09-24 10:43:24)


Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

Offline

#31 2018-10-07 13:40:46

miroR
Member
From: Zagreb, Croatia
Registered: 2016-11-30
Posts: 217  
Website

Re: Grsecurity/Pax installation on Devuan GNU/Linux

Regarding a tiny comparison on Debian Forums at:
http://forums.debian.net/viewtopic.php? … 59#p679387

I wrote:

So... It's still probably safer with the free grsec kernel (dappersec)... Sorely missing the protections from Meltdown and Spectre, but most other protectiions are in place. And pls. note that it's a dev from the KSPP team. Hardly biased towards grsec.

No, it's probably not... While I haven't sudied those in depth, it's probably the Meltdown and Spectre that are the most important to have countermeasures in your kernel against, and grsec/dappersec can't at this time, and there seem no interest from spender and PaX Team, the authors... and grsec/dappersec can't protect you from those...
I think I'm closing my engagement with what is left in the open FOSS world of grsecurity.

See also:
https://github.com/dapperlinux/dapper-s … -427653248
and
https://github.com/minipli/linux-unoffi … -427652732

Regards!


Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

Offline

#32 2019-01-13 10:38:11

groog.17
Member
Registered: 2018-08-05
Posts: 4  

Re: Grsecurity/Pax installation on Devuan GNU/Linux

miroR wrote:

and grsec/dappersec can't protect you from those...

In fact they can. https://grsecurity.net/respectre_announce.php

Respectre™ is a nod to the Spectre speculation attack and signifies that it (re)veals potential Spectre vulnerabilities, (re)spects the original intent of the code, and automatically (re)factors it via a compiler plugin to eliminate speculation-based side channels.

The point is how to get it, when they even do not answer emails.

Best regards.

Offline

Board footer