Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Linus: Don't bother with grsecurity. Their patches are pure garbage

spinics.net

Post reply on HN
Print view View original

131–140 of 172 posts

Re: Linus: Don't bother with grsecurity. Their patches are pure garbage

#131

Post by vectorEQ »

grsecurity, i like it. pretty secure for my machine. never had any breakage... i think Linus should probarbly pay more attention to security issues in 'his' os instead of being ratty about people taking it in their own hands to fix it... if u want to know: you can increase the stack guard page for grsecurity too, as theirs is also way small...

On the otherhand i dont see why a kernel doesn't track it's stack pointers and heap allocations to see if there is overlap, its basic idea and stupid that they ever dared to say this is not exploitable. Even though not many ppl seem to have looked at it and/or done it, its plainly obvious there is an issues with there being a possibility of overlap;. The stack guard page is a stupid mechanism which at best causes an application crash (fking handle that shit properly??) masked as 'security incident'....

that being said, linux, grsecurity, still my main choice, still much love for linus and grsecurity folks. whish they could get along better and perhaps someday think of actual solutions instead of infinite bandaids!

Re: Linus: Don't bother with grsecurity. Their patches are pure garbage

#132

Post by KGIII »

dm319 wrote: post #116
bubblethink wrote: post #109

How are the Linux Foundation's funds allocated, and how much say does Linus have in it ? Most of this boils down to lack of money and attribution for grsec. Why didn't the Linux Foundation or Linus try to officially fund grsec to upstream their patches ? KSPP is still costing money. How much would it have cost to pay grsec directly instead ?

As far as I understand that is the opposite of how it works. The linux foundation was set up to receive funds from big business contributors - like Intel, Microsoft etc, who have an interest in the continuation of the linux kernel and wish to pay for jobs which didn't have a source of funding (i.e. Linus's job and other maintainer) and who wished to remain non-partisan. So these companies provide both code and money.…

Also, probably because grsec's code doesn't meet the standards. By almost all accounts, it pretty much sucks. I am unqualified to opine, but I trust the opinions of who are qualified - by being the people who try to implement it.

Re: Linus: Don't bother with grsecurity. Their patches are pure garbage

#133

Post by [deleted] »

snuxoll wrote: post #30
cyphar wrote: post #21

Earlier quoted context omitted.

The grsecurity patches have been made private. Although they are under the GPL (because they are a derivative work of the Linux kernel), the company that produces grsecurity engages in the unethical (and potentially illegal) business practice of threatening to terminate customer subscriptions if they exercise their right to distribute the patches. In other words, no customer is going to distribute the patches because…

> the company that produces grsecurity engages in the unethical (and potentially illegal) Unethical, probably - illegal, probably not. The GPL dictates what you can do once code hits your hands (or binaries compiled with), it doesn't prevent companies from selling it to you or what contract they do it under.

[deleted]

Re: Linus: Don't bother with grsecurity. Their patches are pure garbage

#134

Post by mercymichael »

hi my girlfriend and I been dating for about 8 to 10 months and we live together for about 4 months we recently broke uo because I was being selfish wanted to control her didn’t appreciate her didn’t show much affection but I really do love her fought a lot and I was stuck I was hurt I had to go home every night knowing shes in the other room sleeping without a care in the world I hate it I begged her back open my heart to her and nothing all she kept saying is I love you but I don’t want to be with you I have another man in my life now, I talked with the popular Dr. Akin and he prayed for my relationship and I got her back in two days. If you are hurt in your relationship,get in touch with him(prayerstosavemarriage@hotmail.com)cos I promised him I will talk about him on the internet,and now we plan of getting married next month :)

Re: Linus: Don't bother with grsecurity. Their patches are pure garbage

#135

Post by mercymichael »

hi my girlfriend and I been dating for about 8 to 10 months and we live together for about 4 months we recently broke uo because I was being selfish wanted to control her didn’t appreciate her didn’t show much affection but I really do love her fought a lot and I was stuck I was hurt I had to go home every night knowing shes in the other room sleeping without a care in the world I hate it I begged her back open my heart to her and nothing all she kept saying is I love you but I don’t want to be with you I have another man in my life now, I talked with the popular Dr. Akin and he prayed for my relationship and I got her back in two days. If you are hurt in your relationship,get in touch with him(prayerstosavemarriage@hotmail.com)cos I promised him I will talk about him on the internet,and now we plan of getting married next month :)

Re: Linus: Don't bother with grsecurity. Their patches are pure garbage

#136

Post by mercymichael »

hi my girlfriend and I been dating for about 8 to 10 months and we live together for about 4 months we recently broke uo because I was being selfish wanted to control her didn’t appreciate her didn’t show much affection but I really do love her fought a lot and I was stuck I was hurt I had to go home every night knowing shes in the other room sleeping without a care in the world I hate it I begged her back open my heart to her and nothing all she kept saying is I love you but I don’t want to be with you I have another man in my life now, I talked with the popular Dr. Akin and he prayed for my relationship and I got her back in two days. If you are hurt in your relationship,get in touch with him(prayerstosavemarriage@hotmail.com)cos I promised him I will talk about him on the internet,and now we plan of getting married next month :)

Re: Linus: Don't bother with grsecurity. Their patches are pure garbage

#137

Post by mercymichael »

KGIII wrote: post #43
rhblake wrote: post #10

See Linus' follow-up http://seclists.org/oss-sec/2017/q2/596 for clarification: > They aren't split up, there has never been any effort by you to make them palatable to upstream, and when somebody else dioes try to make them palatable to upstream, you start crying about how people are taking advantage of your work (hah), and try to make them private instead. ... > It's literally less work for people to re-implement t…

That's actually pretty tame for Linus. This is his kinder, gentler side. He must be getting old.

hi my girlfriend and I been dating for about 8 to 10 months and we live together for about 4 months we recently broke uo because I was being selfish wanted to control her didn’t appreciate her didn’t show much affection but I really do love her fought a lot and I was stuck I was hurt I had to go home every night knowing shes in the other room sleeping without a care in the world I hate it I begged her back open my heart to her and nothing all she kept saying is I love you but I don’t want to be with you I have another man in my life now, I talked with the popular Dr. Akin and he prayed for my relationship and I got her back in two days. If you are hurt in your relationship,get in touch with him(prayerstosavemarriage@hotmail.com)cos I promised him I will talk about him on the internet,and now we plan of getting married next month :)

Re: Linus: Don't bother with grsecurity. Their patches are pure garbage

#138

Post by mercymichael »

ajarmst wrote: post #13
ivanbakel wrote: post #7

It's a struggle to respect the security opinions of someone who has actively admitted that he thinks "[security] bugs are just bugs". [0] Personally, I find it quite hard to respect Linus generally - his offensive personality is clearly not something that would be appropriate coming from anyone else in any community, but for some reason he gets a free ride for being a difficult genius. 0. http://www.washingtonpost.co…

Nooooooo! Now we have to listen to the "what is an OS?" semantic flamewar!

hi my girlfriend and I been dating for about 8 to 10 months and we live together for about 4 months we recently broke uo because I was being selfish wanted to control her didn’t appreciate her didn’t show much affection but I really do love her fought a lot and I was stuck I was hurt I had to go home every night knowing shes in the other room sleeping without a care in the world I hate it I begged her back open my heart to her and nothing all she kept saying is I love you but I don’t want to be with you I have another man in my life now, I talked with the popular Dr. Akin and he prayed for my relationship and I got her back in two days. If you are hurt in your relationship,get in touch with him(prayerstosavemarriage@hotmail.com)cos I promised him I will talk about him on the internet,and now we plan of getting married next month :)

Re: Linus: Don't bother with grsecurity. Their patches are pure garbage

#140

Post by majewsky »

vectorEQ wrote: post #131

grsecurity, i like it. pretty secure for my machine. never had any breakage... i think Linus should probarbly pay more attention to security issues in 'his' os instead of being ratty about people taking it in their own hands to fix it... if u want to know: you can increase the stack guard page for grsecurity too, as theirs is also way small... On the otherhand i dont see why a kernel doesn't track it's stack pointers…

> grsecurity, i like it. pretty secure for my machine. never had any breakage...

Pretty weak argument. I'm running stock Linux without grsec and I've never had any breakage either.

> i think Linus should probably pay more attention to security issues

What makes you think that he doesn't? Also, there is a whole separate team (the Kernel Self Protection Project) working on the issue.

Post reply on HN