Hector Martin

...moving forward, only big companies who go out of their way AND pay $$$ to get grsec.

If you blame Linus for grsec not working with upstream in the past, that's fine by me; I don't know and don't care about the history.

But evidently it *is* possible to get stuff upstream now, albeit slower (but also less hackily), slowly decreasing the value add of grsec.

Mind you, if RAP were open, I don't think it'd have a hard time being upstreamed as an optional feature - not disruptive like other stuff.

you clearly have no idea what it took to protect linux with RAP. it's the *most* complex feature of PaX by far.

I could be mistaken on that point, since of course RAP is closed and I can't inspect it. (Less certainty is why I said "I don't think".)

scripts/gcc-plugins/rap_plugin/rap_plugin.c, What do you mean it is "closed"? you can totally inspect it and make your very own even...

AFAIK the formerly-public version was not the complete RAP and missing critical parts.