Hello PaX Team, Spender, After spending a few weeks meditating on this thread and its responses, it strikes me that the best thing to do might be to, in fact, apply to the CII. The initial discussion

Hopefully the Grsecurity/PaX developers are actually reading this thread and do consider applying! One last point, and then I'll fade away a little bit. There is a set of projects that are core infras

That's a nearly reasonable objection, but I think it's a bit narrow of a vision on how many open projects work. More generally, it's "how can a small but essential open source project be supported?" O

Please do try to consider Grsecurity/PaX as not "just another out of tree patchset" but rather a mission critical project that serves a real world benefit in addition to pushing the bounds with the re

I believe there have been significant changes since 2009. I'll let the Grsecurity/PaX developers chime in on this, I guess. It's important to note, though, that it shouldn't be considered relevant whe

Dear Core Infrastructure Initiative: I do consulting for several different security companies. The uniform advice across the industry is: if you want to deploy Linux securely, be sure to be using a Gr