Re: Grsecurity is about to be discontinued, unless...

From: Linus Torvalds
Date: Sat Jan 03 2009 - 15:17:32 EST

On Sat, 3 Jan 2009, Gabor MICSKO wrote:
> In short, I would like to know what is your answer to this request. And
> in the case if you see no chance for the integration, I would like to
> know what is the reason behind this decision.

Quite frankly, historically the patches have been a mis-match of

- some sane stuff

- lots of totally insane and very annoying and invasive code.

an example of the second class is the totally idiotic "emulate NX bit -
badly - with code segment limits" kind of patches. These kinds of patches
only add unmaintainable crap that isn't even relevant in the long run, and
thus any sane maintainer (me) should refuse to take them.

The apparent inability (and perhaps more importantly - total
unwillingless) from the PaX team to be able to see what makes sense in a
long-term general kernel and what does not, and split things up and try to
push the sensible things up (and know which things are too ugly or too
specialized to make sense), caused many PaX features to never be merged.

Much of it did get merged over the years (mostly because some people spent
the time to separate things out), but no, we're not going to suddenly
start merging code like that just because the project is in trouble. None
of the basic issues have been solved.

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at
Please read the FAQ at