I'm trying to compile grsecunoff [1], and I've additionally patched 4.9.74 kernel with HackKurx's retpoline patch [2]. Patching goes fine (spoon-feeding howto can be found in my script [3]).
But I don't have the toolchain to support retpoline. Namely, the first thing at the onset of: fakeroot make deb-pkg (from my script), I get this exact line: arch/x86/Makefile:191: CONFIG_RETPOLINE=y, but not supported by the compiler. Toolchain update recommended. Anybody already had this kind of issue, and has a few quick tips to tell on how to update the toolchain (or other necessary details)? For AMD machines (which I run), to get probably good security again in this post-meltdown-and-spectre era, the main part is retpoline support, which the patch for 4.9.74 grsecunoff has just been published today --author does not claim it to be perfect [4]-- meltdown posing no threat for AMD. (And microcode? Any tips on that?)... Regards! --- [1] https://github.com/minipli/linux-unofficial_grsec [2] https://github.com/HacKurx/public-sharing/blob/master/retpoline_for_unofficial_grsec-4.9.74.patch [3] https://github.com/miroR/grsec-dev1-compile [4] https://github.com/minipli/linux-unofficial_grsec/issues/26#issuecomment-362809911 -- Miroslav Rovis Zagreb, Croatia https://www.CroatiaFidelis.hr
signature.asc
Description: PGP signature
_______________________________________________ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
