Package: linux-grsec
Severity: normal

While sill a long way Reproducible builds might pose a problem for a Grsec kernel when CONFIG_GRKERNSEC_RANDSTRUCT is set to 'y' because this feature randomizes kernel symbols and structures during compilation and is not meant to be the same. For a publicly distributed kernel binary this feature does not provide any protection anyhow because these addresses are already known. This feature will need to be disabled for full compatibility with reproducible build systems.


-- System Information:
Debian Release: 8.2

Reply via email to