| View previous topic :: View next topic |
| Author |
Message |
Zazzman
n00b
Joined: 09 May 2012
Posts: 32
|
 Posted: Sun Oct 22, 2017 1:48 am Post subject: Copperhead sources? did I miss something? |
 |
|
https://github.com/copperhead/linux-hardened/wiki
It does seem to be derived from the now-defunct gentoo-hardened project. And from version numbers, it looks up to date. It doesnt seem to be in the portage tree.
The company behind it looks like theyre big into android (specifically nexus) security, but released sources to build for x64 too.
Anybody have any opinions or info to offer? |
|
| Back to top |
|
 |
GOS
Tux's lil' helper
Joined: 09 Sep 2010
Posts: 102
Location: Germany
|
| Posted: Mon Jan 01, 2018 7:31 pm Post subject: |
|
|
I do not know, if gentoo plans to incorporate copperhead-sources into portage.
Nonetheless you can use it. Make the directory | Code: | | /etc/portage/patches/sys-kernel/vanilla-sources-4.14.9 |
and copy | Code: | | linux-hardened-4.14.9.a.patch |
and | Code: | | linux-hardened-4.14.9.a.patch.sig |
into this folder
Then install (or reinstall) vanilla-sources-4.14.9 which turns into copperhead-sources via the patch. (This approach does not work with gentoo-sources as its foundation)
Unfortunately copperhead-sources includes at the moment considerably less features then hardened-sources-4.9.x did (TPE, EMUTRUMP, ...). Additionally it is not clear what happens to the pax_kernel flag in future.
For the moment you can use the 4.9-lts series with grsec patches instead of copperhead (https://gpo.zugaina.org/sys-kernel/grsecurity-sources)
Regards
GOS
PS: Has anyone an idea what will happen to the "pax_kernel" flag in the near future. |
|
| Back to top |
|
|
|
Unsupported Software
