Your message dated Fri, 27 Mar 2009 23:23:59 +0100
with message-id <20090327222359.gd3...@baikonur.stro.at>
and subject line Re: Bug#521482: linux-2.6: adopt hardening patches (execshield
and grsecurity) into default kernel packages for squeeze
has caused the Debian Bug report #521482,
regarding linux-2.6: adopt hardening patches (execshield and grsecurity) into
default kernel packages for squeeze
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
521482: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521482
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
package: linux-2.6
severity: wishlist
tags: security
there are now several security hardening kernel patches available in
the debian archive (e.g. execshield and grsecurity). it would be great
if these patches were incorporated into the default kernel packages.
this would go a long way toward reducing the impact of security threats
to the majority of end users. most users will never consider applying
those patches or building/using a non-vanilla debian kernel.
thank you for your consideration.
mike
--- End Message ---
--- Begin Message ---
On Fri, Mar 27, 2009 at 04:53:43PM -0400, Michael S. Gilbert wrote:
> package: linux-2.6
> severity: wishlist
> tags: security
>
> there are now several security hardening kernel patches available in
> the debian archive (e.g. execshield and grsecurity). it would be great
> if these patches were incorporated into the default kernel packages.
>
> this would go a long way toward reducing the impact of security threats
> to the majority of end users. most users will never consider applying
> those patches or building/using a non-vanilla debian kernel.
>
> thank you for your consideration.
> mike
get them upstream merged
see http://wiki.debian.org/DebianKernelPatchAcceptanceGuidelines
or better use selinux and improve it!!
--- End Message ---
