On Thu, 2016-10-06 at 09:24 +0000, [email protected] wrote: > https://github.com/pentoo/pentoo-livecd/tree/master/kernel/4.4.8 > > Maintainance should be very easy as the most important patch, > 4511_pax-4.4.2.patch, is small and simple. 4508_aufs4-mmap-pax.patch is > just a version of 4508_aufs4-mmap.patch which is compatible with PaX. > For > kernel 4.5.7-r5, applying the following in order works: > > 4506_aufs4-kbuild.patch > 4507_aufs4-mmap-pax.patch > 4509_aufs4-standalone.patch > 4510_aufs4-files.patch > 4511_pax-4.4.2.patch
Hi, thanks for the report. I'm not completely against adding support for aufs4 but I don't have any way to test. Also, I'd like to stay close to the patches currently in Debian: https://anonscm.debian.org/cgit/collab-maint/linux-grsec.git/tree/debian/patch es/features/all/aufs4 It seems that just replacing aufs4-mmap.patch by aufs4-mmap-pax.patch is not enough, it doesn't apply on top of aufs4-base.patch in 4.7.5: ----- Applying patch features/all/aufs4/aufs4-base.patch Applying patch features/all/grsec/4508_aufs4-mmap-pax.patch 1 out of 1 hunk FAILED 1 out of 2 hunks FAILED 1 out of 1 hunk FAILED 3 out of 8 hunks FAILED Patch features/all/grsec/4508_aufs4-mmap-pax.patch does not apply (enforce with -f) ---- I honestly won't spent time on it, maybe it's just that the kernel versions don't match (4.5.7 vs. 4.7.5) but then if it's really that much kernel dependent someone will have to step up and maintain aufs4-mmap-pax.patch for the Debian kernel, because I won't do it. Regards, -- Yves-Alexis
signature.asc
Description: This is a digitally signed message part
