Hi! On Sun, Apr 30, 2017 at 04:00:39PM +0300, Andrew Savchenko wrote: > The only way to preserve this functionality in the long run is to > port it to the mainline kernel. This will not be easy, most likely > not everything will be accepted, some stuff will have to be > reimplemented using another approaches, etc.
We had 16 years to do this with help of GrSec/PaX developers. It wasn't happened, and it's unlikely happens now unless some huge company decide to spend a lot of resources for this. Maybe Google will do, in the name of increasing Android security. And I'm afraid there are no more options now. > But there is no other way. GrSec/PaX team can be trusted no longer. > They ruined all 16 years of good and trustworthy record by what was > done 3 days ago, though the first bells rang 2 years ago when paid > subscription for stable patches was enforced. Even if they will > yield to the community pressure now, they may repeat this betrayal > later and thus can be trusted no longer. Hey hey hey! Don't be so harsh. No one is perfect, everyone made mistakes, and credits/money/ego is very usual "good" reason to made mistake. Not all people is able to admit their mistakes and fix them, but we still may believe in GrSec/PaX developers. Just give them some time to cool down and a few good reasons to change their decision. They've pushed the button, true, but they can also release the button if they will like to. And tell it was a "training alert". :) -- WBR, Alex.
signature.asc
Description: PGP signature