Re: Fwd: Grsecurity and Pax

[<sf...@us...>]

toki clover:
> I am sure that all those tiny, live, secure cd/pendrive based distros would
> highly appreciate that combination as well. So, this is a hot topic.

So hot?
Hmm... it is a little suprise for me honestly speaking...


> I don't remember seeing that patche around in the ML, but I only
> subscribed to it since less than two years ago.
	:::
> I found that "think twice beforehand" ridiculous for a valid reason to
> over complicate things for nothing. Some inputs/feedback need to be
> sent to GrSec folks.

Refer to these mails and its thread.
Hope this helps.

- May 2010, the first reported error and an extra patch
  http://www.mail-archive.com/aufs-users%40lists.sourceforge.net/msg02648.html

- May 2010, my question posted to grsec ML
  https://grsecurity.net/pipermail/grsecurity/2010-May/001029.html

- Jun 2010, I put new grsecurity-2.1.14-2.6.33.4.patch in aufs2.1-33
  branch in aufs2-standalone.git

- Feb 2011, a sample of how to merge
  http://www.mail-archive.com/aufs-users%40lists.sourceforge.net/msg03213.html

- Feb 2011, same (probably) problem again
  http://www.mail-archive.com/aufs-users%40lists.sourceforge.net/msg03190.html

- Mar 2011, again
  http://www.mail-archive.com/aufs-users%40lists.sourceforge.net/msg03221.html

- Jan 2012, again, but this time with their constify gcc plugin
  http://www.mail-archive.com/aufs-users%40lists.sourceforge.net/msg03631.html

These are grep-ped from my local archive.
If you google harder, you will find more information I guess.


My solution for this "const member" issue is unchanged essentially from
the beginning. And I agree this is a dirty solution.
I guess you will need to adjust the patch if you pick up the old one
from the archive, since both grsec and aufs are updating day to day.


J. R. Okajima