On 15/05/10 02:15, pagee...@freemail.hu wrote:
> On 13 May 2010 at 0:55, Alex Efros wrote:
> 
>> Server was rebooted, now everything is fine. Server software is nearly
>> up-to-date x86 Gentoo (last update was 2-3 weeks ago), kernel is
>> sys-kernel/hardened-sources-2.6.28-r9.
> 
> i'd need the vmlinux image to tell for sure but it's most likely a false 
> positive
> that has been fixed since in later kernels, so please try to use something we 
> actually
> support (.32 or .33, soon .34), not .28.

I'm sorry for probably being quite upset now.  But in regards to the
supported version, that sounds like utter non-sense to me.  I just
updated the portage tree ... and this is what is available there:

$ find /usr/portage/sys-kernel/hardened-sources
/usr/portage/sys-kernel/hardened-sources
/usr/portage/sys-kernel/hardened-sources/metadata.xml
/usr/portage/sys-kernel/hardened-sources/Manifest
/usr/portage/sys-kernel/hardened-sources/ChangeLog
/usr/portage/sys-kernel/hardened-sources/hardened-sources-2.6.25-r13.ebuild
/usr/portage/sys-kernel/hardened-sources/hardened-sources-2.6.26-r9.ebuild
/usr/portage/sys-kernel/hardened-sources/hardened-sources-2.6.28-r9.ebuild
/usr/portage/sys-kernel/hardened-sources/hardened-sources-2.6.29.ebuild
/usr/portage/sys-kernel/hardened-sources/hardened-sources-2.6.28-r7.ebuild

I simply do not see that .32, .33 nor any .34 kernels have been made
available nor marked as stable.  And I am not using a fixed mirror in
/etc/make.conf.

This is once again a repetition of the a similar discussion a few weeks
ago, where several of us raised the concern about an outdated hardened
stable kernel.

I might have missed some obvious information, but I cannot see anywhere
among the hardened project documentation pages that we should expect to
find the hardened kernels anywhere else.

<http://www.gentoo.org/doc/en/?catid=project>
<http://www.gentoo.org/proj/en/hardened/>

We *seriously* need to get this clarified now.  There might even be a
lot of users who don't visit the hardened IRC channel or the mailing
list - and they are most probably running a .28-r9 kernel, which is the
latest stable kernel - at least how I can understand it ... this
situation is making me uncomfortable and quite worried now!


kind regards,

David Sommerseth

Reply via email to