Author Topic: Grsec/PaX Discontinuing Public Release of Stable Patches  (Read 605 times)

0 Members and 1 Guest are viewing this topic.

Offline x40a0e

  • Serf
  • *
  • Posts: 29
  • Cookies: 9
    • View Profile
Grsec/PaX Discontinuing Public Release of Stable Patches
« on: August 27, 2015, 05:50:58 pm »
It looks like Wind River (a subsidairy of Intel) has been abusing trademarks of Grsecurity, and possibly voilating the GPL, and basically all around abusing the team, even asking for development help on their forums. Due to the massive inconvenience of this, and the lack of funds to take legal recourse, Grsecurity may be disconinuing thier public release of their stable patches. It sounds like they will still be releasing the testing Kernel patches, which I believe are the ones used in Gentoo Kernel sources, as well as the Hardened Arch Kernel, so these may remain unaffected, but regardless of this, I think this could be very detremental to the FOSS community, and Linux users. Hopefully they will raise enough money to go to court, although going up against Intel would be a bitch.

Post by Brad Spengler (Lead Grsec developer) explaining the situation.

Ycominator thread
giving more details than I have here.

Offline Xires

  • Noob Eater
  • Administrator
  • Knight
  • *
  • Posts: 379
  • Cookies: 149
    • View Profile
    • Feed The Trolls - Xires
Re: Grsec/PaX Discontinuing Public Release of Stable Patches
« Reply #1 on: August 28, 2015, 07:07:51 pm »
+3 cookies for the amazingly important & useful information, thank you.

This is very unfortunate.  I would be interested in a list of all the companies that have been the cause for this drastic, but entirely necessary, action.  Those companies, and their actions, should be brought out into the spotlight for all to see.  What's more, I wouldn't be sad if their efforts were proven to be inadequate through a number of attacks that proved why grsec's standards are important.

I remember the call for copyright lawyers going out some time ago and checked with the lawyers that I knew at the time.  Unfortunately, they specialized in musical copyrights and despite my attempts to explain that software copyrights also fall under the realm 'artistic rights to license', they were unwilling to handle such a case.  Perhaps they knew what kind of assholes they'd be dealing with.

Although some of us will remain unaffected, for the most part, due to the fact that we port our own patches from testing or write our own patches from scratch, I expect this may have some far-reaching impacts that aren't easily predicted at this time.  I would not doubt that another project that claims to do similar work would pop up in the next couple of years.  I could see such a thing being started specifically to gain the interest of a number of people in the FOSS community and get new patches submitted by new people, effectively abusing a different subgroup for free work.  However, I also expect to see quite a few new 0days circulate in the next year or so.  Perhaps the latter will prompt the former; we shall see.

Update: it looks like VeriFone, producers a very popular credit/debit card processing system, are involved.
« Last Edit: August 28, 2015, 07:18:18 pm by Xires »
-Xires