Kevin Chadwick <m8il1i...@gmail.com> wrote: > On Thu, 8 Feb 2018 13:41:20 -0800 > > > > I am considering a move to OpenBSD, since I subscribed to this > > mailing list some time ago (~few months). I want to take advantage > > of security. > > I would use OpenBSD if you can but if you do decide on Linux and care > about security there are only really a couple of choices. Alpine linux > is currently working on keeping a hardened kernel going with the > grsecurity, upstream debacle. > > https://alpinelinux.org/ > http://adelielinux.org/ > > Gentoo is good too but you have to build everything from source. I > think they still have a hardened kernel, not sure. >
Hardened Linux kernel sources were dropped from the official Gentoo repo in August 2017.¹ However, for now there is an alternative for Gentoo users,² which started³ with the unofficial forward ports of the last publicly available grsecurity patches.⁴ For how long, it remains to be seen… At the moment the only way forward seems to be https://github.com/copperhead/linux-hardened. Not affiliated to any of these projects, just a former Hardened Gentoo user, still have it installed on a stashed-away HDD, just in case… 1. https://www.gentoo.org/news/2017/08/19/hardened-sources-removal.html 2. https://gitweb.gentoo.org/dev/ago.git/tree/sys-kernel/grsecurity-sources 3. https://blogs.gentoo.org/ago/2017/08/21/sys-kernel-grsecurity-sources-available/ 4. https://github.com/minipli/linux-unofficial_grsec
signature.asc
Description: OpenPGP digital signature