summaryrefslogtreecommitdiff
path: root/metadata/news/2015-10-21-future-support-of-hardened-sources-kernel
diff options
context:
space:
mode:
authorV3n3RiX <venerix@redcorelinux.org>2017-10-09 18:53:29 +0100
committerV3n3RiX <venerix@redcorelinux.org>2017-10-09 18:53:29 +0100
commit4f2d7949f03e1c198bc888f2d05f421d35c57e21 (patch)
treeba5f07bf3f9d22d82e54a462313f5d244036c768 /metadata/news/2015-10-21-future-support-of-hardened-sources-kernel
reinit the tree, so we can have metadata
Diffstat (limited to 'metadata/news/2015-10-21-future-support-of-hardened-sources-kernel')
-rw-r--r--metadata/news/2015-10-21-future-support-of-hardened-sources-kernel/2015-10-21-future-support-of-hardened-sources-kernel.en.txt62
-rw-r--r--metadata/news/2015-10-21-future-support-of-hardened-sources-kernel/2015-10-21-future-support-of-hardened-sources-kernel.en.txt.asc17
2 files changed, 79 insertions, 0 deletions
diff --git a/metadata/news/2015-10-21-future-support-of-hardened-sources-kernel/2015-10-21-future-support-of-hardened-sources-kernel.en.txt b/metadata/news/2015-10-21-future-support-of-hardened-sources-kernel/2015-10-21-future-support-of-hardened-sources-kernel.en.txt
new file mode 100644
index 000000000000..3d5c76cba3d4
--- /dev/null
+++ b/metadata/news/2015-10-21-future-support-of-hardened-sources-kernel/2015-10-21-future-support-of-hardened-sources-kernel.en.txt
@@ -0,0 +1,62 @@
+Title: Future Support of hardened-sources Kernel
+Author: Anthony G. Basile <blueness@gentoo.org>
+Content-Type: text/plain
+Posted: 2015-10-21
+Revision: 3
+News-Item-Format: 1.0
+Display-If-Installed: sys-kernel/hardened-sources
+Display-If-Profile: hardened/linux/amd64
+Display-If-Profile: hardened/linux/amd64/no-multilib
+Display-If-Profile: hardened/linux/amd64/no-multilib/selinux
+Display-If-Profile: hardened/linux/amd64/selinux
+Display-If-Profile: hardened/linux/amd64/x32
+Display-If-Profile: hardened/linux/arm/armv6j
+Display-If-Profile: hardened/linux/arm/armv7a
+Display-If-Profile: hardened/linux/ia64
+Display-If-Profile: hardened/linux/musl/amd64
+Display-If-Profile: hardened/linux/musl/amd64/x32
+Display-If-Profile: hardened/linux/musl/arm/armv7a
+Display-If-Profile: hardened/linux/musl/mips
+Display-If-Profile: hardened/linux/musl/mips/mipsel
+Display-If-Profile: hardened/linux/musl/ppc
+Display-If-Profile: hardened/linux/musl/x86
+Display-If-Profile: hardened/linux/powerpc/ppc32
+Display-If-Profile: hardened/linux/powerpc/ppc64/32bit-userland
+Display-If-Profile: hardened/linux/powerpc/ppc64/64bit-userland
+Display-If-Profile: hardened/linux/uclibc/amd64
+Display-If-Profile: hardened/linux/uclibc/arm/armv7a
+Display-If-Profile: hardened/linux/uclibc/mips
+Display-If-Profile: hardened/linux/uclibc/mips/mipsel
+Display-If-Profile: hardened/linux/uclibc/ppc
+Display-If-Profile: hardened/linux/uclibc/x86
+Display-If-Profile: hardened/linux/x86
+Display-If-Profile: hardened/linux/x86/selinux
+
+For many years, the Grsecurity team [1] has been supporting two versions of
+their security patches against the Linux kernel, a stable and a testing
+version, and Gentoo has made both of these available to our users through the
+hardened-sources package. However, on August 26 of this year, the team
+announced they would no longer be making the stable version publicly
+available, citing trademark infringement by a major embedded systems company
+as the reason. [2] The stable patches are now only available to sponsors of
+Grsecurity and can no longer be distributed in Gentoo. However, the team did
+assure us that they would continue to release and support the testing version
+as they have in the past.
+
+What does this means for users of hardened-sources? Gentoo will continue to
+make the testing version available through our hardened-sources package but we
+will have to drop support for the 3.x series. In a few days, those ebuilds
+will be removed from the tree and you will be required to upgrade to a 4.x
+series kernel. Since the hardened-sources package only installs the kernel
+source tree, you can continue using a currently built 3.x series kernel but
+bear in mind that we cannot support you, nor will upstream. Also keep in mind
+that the 4.x series will not be as reliable as the 3.x series was, so
+reporting bugs promptly will be even more important. Gentoo will continue to
+work closely with upstream to stay on top of any problems, but be prepared for
+the occasional "bad" kernel. The more reporting we receive from our users,
+the better we will be able to decide which hardened-sources kernels to mark
+stable and which to drop.
+
+Refs.
+[1] https://grsecurity.net
+[2] https://grsecurity.net/announce.php
diff --git a/metadata/news/2015-10-21-future-support-of-hardened-sources-kernel/2015-10-21-future-support-of-hardened-sources-kernel.en.txt.asc b/metadata/news/2015-10-21-future-support-of-hardened-sources-kernel/2015-10-21-future-support-of-hardened-sources-kernel.en.txt.asc
new file mode 100644
index 000000000000..31e9f2489610
--- /dev/null
+++ b/metadata/news/2015-10-21-future-support-of-hardened-sources-kernel/2015-10-21-future-support-of-hardened-sources-kernel.en.txt.asc
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+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+=R4yN
+-----END PGP SIGNATURE-----