Bug#605090: linux-2.6: [RFC] Add a grsec featureset to Debian kernels

2010-12-04 Thread Colin Watson
On Fri, Dec 03, 2010 at 06:01:47PM +0100, Yves-Alexis Perez wrote: > On dim., 2010-11-28 at 10:44 +0100, Yves-Alexis Perez wrote: > > On sam., 2010-11-27 at 23:56 +, Ben Hutchings wrote: > > > These gids are in the 'dynamically assigned' range and must not be > > > configured into the kernel; s

Bug#605090: linux-2.6: [RFC] Add a grsec featureset to Debian kernels

2010-12-03 Thread Yves-Alexis Perez
On dim., 2010-11-28 at 10:44 +0100, Yves-Alexis Perez wrote: > On sam., 2010-11-27 at 23:56 +, Ben Hutchings wrote: > > I suggest you put it in a separate package e.g. linux-grsec-base and > > have the image packages depend on or recommend it. > > Good point, especially if there's some work to

Bug#605090: linux-2.6: [RFC] Add a grsec featureset to Debian kernels

2010-11-28 Thread Yves-Alexis Perez
On sam., 2010-11-27 at 23:56 +, Ben Hutchings wrote: > On Sat, 2010-11-27 at 23:34 +0100, Yves-Alexis Perez wrote: > [...] > > == Configuration > > > > The KConfig is the one I use, which is open to discussion (like > > everything else anyway). I've tried to be fairly secure, so some > > featu

Bug#605090: linux-2.6: [RFC] Add a grsec featureset to Debian kernels

2010-11-27 Thread Ben Hutchings
On Sat, 2010-11-27 at 23:34 +0100, Yves-Alexis Perez wrote: [...] > == Configuration > > The KConfig is the one I use, which is open to discussion (like > everything else anyway). I've tried to be fairly secure, so some > features might not work for some people. > > When possible, options are con