Your message dated Sun, 15 Apr 2018 15:47:34 +0000
with message-id <e1f7jsm-0001b4...@fasolo.debian.org>
and subject line Bug#895433: Removed package(s) from unstable
has caused the Debian Bug report #814787,
regarding linux-grsec: GRKERNSEC_RANDSTRUCT shouldn't be enabled
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
814787: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814787
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: linux-grsec
Severity: important
GRKERNSEC_RANDSTRUCT shouldn't be enabled on binary distro packages.
1) It's compile-time randomization, making it useless security wise
(the attacker can fetch the binary from a mirror too!).
2) It prevents users from rebuilding kernel modules as the
source packaged is distributed "cleaned".
On my systems, it prevents DKMS from working altogether.
# modprobe vboxdrv
[ 3841.583856] : version magic '4.3.0-1-grsec-amd64 SMP mod_unload
modversions KERNEXEC_BTS UDEREF REFCOUNT GRSEC ' should be '4.3.0-1-
grsec-amd64 SMP mod_unload modversions KERNEXEC_BTS UDEREF REFCOUNT
CONSTIFY_PLUGIN STACKLEAK_PLUGIN GRSEC
RANDSTRUCT_PLUGIN_643b63e2ae54ebcf23cb3cb1ea94ff2584bab4387b91fadf06a1b
7fd2f2ad003'
Please disable GRKERNSEC_RANDSTRUCT.
-- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.3.0-1-grsec-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
--- End Message ---
--- Begin Message ---
Version: 4.9.65-2+grsecunoff1+rm
Dear submitter,
as the package linux-grsec has just been removed from the Debian archive
unstable we hereby close the associated bug reports. We are sorry
that we couldn't deal with your issue properly.
For details on the removal, please see https://bugs.debian.org/895433
The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.
This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmas...@ftp-master.debian.org.
Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)
--- End Message ---
