Re: More CONFIG_VMAP_STACK vulnerabilities, refcount_t UAF, and an ignored Secure Boot bypass / rootkit method

[Linus Torvalds <torvalds () linux-foundation org>]

On Sat, Jun 24, 2017 at 8:15 AM, Brad Spengler <spender () grsecurity net> wrote:
> So Linus, you called the patches garbage when someone asked how we fixed the heap
> stack gap issue 7 years ago when you failed to.  Can you provide any technical details
> demonstrating why that fix is garbage,

I didn't call "that fix" garbage.

I called the grsecurity patches garbage.

Why?

They aren't split up, there has never been any effort by you to make
them palatable to upstream, and when somebody else *dioes* try to make
them palatable to upstream, you start crying about how people are
taking advantage of your work (hah), and try to make them private
instead.

So tell me, why shouldn't I consider them garbage?  They are.

It's literally less work for people to re-implement things than look
at your mixed-up patches, and YOU SEEM TO BE DOING THAT ON PURPOSE.

Now, prove *me* wrong. Start trying to integrate your work upstream,
and send individual patches with commit logs that can be integrated.

> Put up or shut up, for once.

Indeed, Brad.

                  Linus