Re: Opinion about linux-grsec in a stable release
On Wed, Mar 2, 2016 at 10:09:47 +0100, Yves-Alexis Perez wrote:
> Hi teams,
>
> [first of all, I'm writing this with my linux-grsec hat, not my Debian
> security team member hat, obviously]
>
> As you may know, src:linux-grsec was accepted in unstable earlier this year.
> As a quick summary, this is a source linux package (forked from and
> periodically rebased against src:linux) which generates a linux kernel with
> the grsecurity hardening patch (the patch is mostly about fighting memory
> corruptions bugs, but not only, I won't enter into details here to keep it
> short, but more information can be found in the ITP bug #605090).
>
At this point I think it's not a good fit for stable. Something very
much like backports, where you can update the package easily and often,
seems like it'd make supporting the package easier. We only update
(old)stable every few months, which depending on timing vs upstream
releases could become quite awkward.
Cheers,
Julien
Reply to: