Re: [qubes-users] Re: What do you think about Grsecurity future ?

2017-07-05 Thread 'Vincent Adultman' via qubes-users
>  Original Message 
> Subject: [qubes-users] Re: What do you think about Grsecurity future ?
> Local Time: July 5, 2017 6:05 PM
> UTC Time: July 5, 2017 5:05 PM
> From: turboa...@gmail.com
> To: qubes-users <qubes-users@googlegroups.com>
> turboa...@gmail.com
> End of official PaX and grsecurity support in Arch Linux
> https://lists.archlinux.org/pipermail/arch-general/2017-April/043604.html

It's a great pity, especially as the coldkernel guys were just starting to get 
going with something us Qubes users could deploy.
I don't know any of the personalities involved to speak to the wider issues of 
whether the decision to pull public patches is justified or not, but personally 
if it's a big enough FU to large corporate rip off merchants of original work 
and causes them enough problems perhaps it's worth the aggravation to us mere 
mortals. If it's just about money and whose balls swing the longest...well meh. 
For some reason (given I don't use his OS or know him) I trust the word of the 
copperhead guy.
I'm unsure of the impact (if any) on what benefits could have been bought to 
dom0 had the decision not been taken, but in VM terms, where we rely on qubes 
provided kernel or distro via pvgrub2 I guess it's business as usual. As I'm 
using 'their' OS, if ITL didn't deign to include something, I'm generally happy 
with that decision.
Once action I have taken is to enable tasket's root action prompt [1] for my 
disposable VM template as a bit of 'hardening' there, although I can see Joanna 
spitting in my eye from here for supporting that action ;) In my view there is 
some utility in knowing if something opened in a dispvm is trying to escalate 
to root...
[[1] 
https://www.qubes-os.org/doc/vm-sudo/](https://www.qubes-os.org/doc/vm-sudo/)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/GhqN2g6YfjQkDuDFqUSRhvKaZWvLMhoCZGxiIvfoB0PPETuAjlqwYEFerys7E_ay8QxKPwnP5nmvWQUxptjCHoVRX0kUWZe928bhHqC1HX8%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: What do you think about Grsecurity future ?

2017-07-05 Thread turboacan
End of official PaX and grsecurity support in Arch Linux

https://lists.archlinux.org/pipermail/arch-general/2017-April/043604.html

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/69899dbb-c177-4282-9571-6fb31d38fb1f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: What do you think about Grsecurity future ?

2017-07-05 Thread turboacan
Also, end of public grsecurity patches 

https://grsecurity.net/passing_the_baton_faq.php

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d7469bbf-4f57-4738-864e-f4a67bdedadf%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.