Posts tagged Gentoo/Hardened

Today (OK, it’s yesterday now, it’s again after 12:00) I had a little fun with pappy (Alexander Gabert) preparing 2.6.18 for prime time

$ ls -AGg 2.6.18
-rw-r--r-- 1   1593 Jan 25 23:25 1500_cvs-2007-1000.patch
-rw-r--r-- 1    797 Jan 25 23:25 4000_deprecate-sk98lin.patch
-rw-r--r-- 1  32192 Jan 25 23:25 4105_dm-bbr.patch
-rw-r--r-- 1 125781 Jan 25 23:25 4300_squashfs-3.1.patch
-rw-r--r-- 1   5710 Jan 25 23:25 4405_alpha-sysctl-uac.patch
-rw-r--r-- 1 864955 Jan 25 23:25 4450_grsec-2.1.9-2.6.18.6-200611100917.patch
-rw-r--r-- 1    910 Jan 25 23:25 4451_grsec-2.1.9-2.6.18.2-mute-warnings.patch
-rw-r--r-- 1   1034 Jan 25 23:25 4452_selinux-avc_audit-log-curr_ip-grsec.patch
-rw-r--r-- 1   2097 Jan 25 23:25 4453_pax_curr_ip-fixes.patch

So far all patches are applying fine and according to Alexander it even works on his workstation. But I’ll wait for Steve/Ned to get back to me telling me if this release works for them or not (as they had serious issues with their hardened desktops – something about the cursor being stuck in the corners).

You may also ask, what for is this mute-warning patch. Basically the new grsecurity patch increased the kernel’s verbosity while running make about two times . Thus we decided to revert the warnings to the ones used in vanilla (that’s via CFLAGS).