And this is why I dropped grsec (who KSPP is pulling from) before it went private. They think the "break the kernel first, ask questions later" approach is reasonable (and then servers crash). Linus is right here: introduce mitigations in *soft mode first* so people can fix shit.https://twitter.com/paxteam/status/932395050520252417 …
You can run a distro like Gentoo which lets you introduce certain exploit mitigations throughout all of userspace (as the hardened toolchain does).
-
-
Well yeah, sure, but not everyone have the patience to compile everything :P. I think the other choice is Alpine Linux.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.