Re: [qubes-users] adding gresecurity to Qubes
It's an old English idiom that means to "not take seriously": http://idioms.thefreedictionary.com/take+with+a+pinch+of+salt On Monday, 20 June 2016 23:00:41 UTC+1, xopl...@gmail.com wrote: > > On Friday, June 17, 2016 at 11:55:40 AM UTC-4, Sandy Harris wrote: > > Lorenzo Lamas > wrote: > > > > > > On Wednesday, June 15, 2016 at 6:31:23 AM UTC+2, Sandy Harris wrote: > > >> > > >> It may not be necessary. There is a kernel hardening project > > >> which is bringing some of the grsecurity & PaX stuff into the > > >> mainline kernel. > > >> http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project > > > > > > > > > May not be objective coming from the grsecurity dev, but the kernel > > > hardening project should be taken with some salt: > > > https://forums.grsecurity.net/viewtopic.php?f=7&t=4476 > > > > In security work, more-or-less everything should be taken with > > salt, but you make a good point. > > > > The main argument on the other side, as I understand it (salt > > needed here too), is that kernel developers want bite-size > > patches,incremental stuff that changes one thing at a time > > and can be tested independently. grsecurity does not provide > > those, so it is unlikely to ever be incorporated into the > > mainline kernel. > > > > The hardening project mostly takes good ideas from grsecurity > > and other sources and massages them into a form that is > > likely to produce patches that mainline kernel developers > > will accept. > > hi what do you mean by takened with salt? > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/250e8b5a-26b3-48b9-bd6c-d6b5279abe04%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] adding gresecurity to Qubes
On Friday, June 17, 2016 at 11:55:40 AM UTC-4, Sandy Harris wrote: > Lorenzo Lamas wrote: > > > > On Wednesday, June 15, 2016 at 6:31:23 AM UTC+2, Sandy Harris wrote: > >> > >> It may not be necessary. There is a kernel hardening project > >> which is bringing some of the grsecurity & PaX stuff into the > >> mainline kernel. > >> http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project > > > > > > May not be objective coming from the grsecurity dev, but the kernel > > hardening project should be taken with some salt: > > https://forums.grsecurity.net/viewtopic.php?f=7&t=4476 > > In security work, more-or-less everything should be taken with > salt, but you make a good point. > > The main argument on the other side, as I understand it (salt > needed here too), is that kernel developers want bite-size > patches,incremental stuff that changes one thing at a time > and can be tested independently. grsecurity does not provide > those, so it is unlikely to ever be incorporated into the > mainline kernel. > > The hardening project mostly takes good ideas from grsecurity > and other sources and massages them into a form that is > likely to produce patches that mainline kernel developers > will accept. hi what do you mean by takened with salt? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e4189423-5e4b-4c85-a3fc-375f10bec2a2%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] adding gresecurity to Qubes
Lorenzo Lamas wrote: > > On Wednesday, June 15, 2016 at 6:31:23 AM UTC+2, Sandy Harris wrote: >> >> It may not be necessary. There is a kernel hardening project >> which is bringing some of the grsecurity & PaX stuff into the >> mainline kernel. >> http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project > > > May not be objective coming from the grsecurity dev, but the kernel > hardening project should be taken with some salt: > https://forums.grsecurity.net/viewtopic.php?f=7&t=4476 In security work, more-or-less everything should be taken with salt, but you make a good point. The main argument on the other side, as I understand it (salt needed here too), is that kernel developers want bite-size patches,incremental stuff that changes one thing at a time and can be tested independently. grsecurity does not provide those, so it is unlikely to ever be incorporated into the mainline kernel. The hardening project mostly takes good ideas from grsecurity and other sources and massages them into a form that is likely to produce patches that mainline kernel developers will accept. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CACXcFmkPjNVdPoU8FZL838Pw12xPnRK9b3ZvKLjJYwwFSBuD-Q%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] adding gresecurity to Qubes
On Wednesday, June 15, 2016 at 6:31:23 AM UTC+2, Sandy Harris wrote: > > It may not be necessary. There is a kernel hardening project > which is bringing some of the grsecurity & PaX stuff into the > mainline kernel. > http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project > May not be objective coming from the grsecurity dev, but the kernel hardening project should be taken with some salt: https://forums.grsecurity.net/viewtopic.php?f=7&t=4476 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/46da9686-ccdf-4c5f-bebe-6dd7fca05cc6%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Fwd: [qubes-users] adding gresecurity to Qubes
On Fri, Jun 3, 2016 at 2:39 AM, wrote: > Hello I was wondering if Qubes might ever add Gresecurity in the future?I > think adding it would be great since you'll have a hardened kernel It may not be necessary. There is a kernel hardening project which is bringing some of the grsecurity & PaX stuff into the mainline kernel. http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CACXcFmnkD%3D-K4QNLuXtPwm%3DMvB_qWMPyJpudstMEEW5F4EhOHA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] adding gresecurity to Qubes
Hello I was wondering if Qubes might ever add Gresecurity in the future?I think adding it would be great since you'll have a hardened kernel -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/71fbfd4a-eb13-4b9b-b77c-ca57ba81f347%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
