Thank you!
Remote
Peter
@pietinger@infosec.exchange
mastodon 4.8.0-alpha.3+glitch0 Followers
39 Following
8 Posts
Joined January 18, 2024
@thesamesam@social.treehouse.systems @kees@fosstodon.org
I see. Thank you very much again! :-)
Replying to
@xgqt#Gentoo
May I add to your one-liner (with the brilliant fzf; I hadn't heard of that before) that "eix -u" not only produces false positives, but that "emerge -u" for individual packages should really be "emerge -1u".
->
https://wiki.gentoo.org/wiki/User:Pietinger/New_at_Gentoo#The_most_common_mistake_beginners_make_with_Gentoo
You surely know that in kernel version 7.2 option CONFIG_RANDOM_KMALLOC_CACHES was renamed (and split) into CONFIG_KMALLOC_PARTITION_CACHES and CONFIG_KMALLOC_PARTITION_RANDOM. Are you going to update your brilliant @KSPP page?
I am sorry - my mistake. :-(
I meant that an update to github could be accompanied by a short info here. :-)
Hmm ... an announcement (about a change) from you on fosstodon could help (and would be great) ... ;-)
With 6.9 we got a new CONFIG_UBSAN_SIGNED_WRAP, but in (new) hardening.config of 6.10-rc1 it is not enabled. Is it not recommended?
@thesamesam@social.treehouse.systems @kees@fosstodon.org
Thanks a lot! I have already updated my wiki article:
https://wiki.gentoo.org/wiki/User:Pietinger/Tutorials/Kernel_Hardening_with_KSPP#KSPP_2024-04-26
TBH I could not find this option in kernel 6.8: CONFIG_UNWIND_PATCH_PAC_INTO_SCS=y (Maybe it is in 6.9?)