Grsecurity/Pax installation on Debian GNU/Linux

[n_hologram]

@timbgo: How is grsecurity holding up against spectre/meltdown?

[timbgo]

@timbgo: How is grsecurity holding up against spectre/meltdown?

Hard work to do, that's how... They need the code that spender and PaX Team left (the last publicly available grsecurity), and they're using it (always you will find they cite them as their source, e.g. in the patches if you subscribe to KSPP)...
But, as...

Expect it to be weeks/months/never. It's a pretty invasive change conflicting with a lot of PaX.

(pls. see that issue for details)
Things are probably happening, but slowly...

[timbgo]

Retpoline-patched grsecunoff (AMD, but no meltdown protection yet for Intel) available under the "current" link, or:
https://www.croatiafidelis.hr/gnu/deb/l ... 180203-22/

[timbgo]

It might be worth trying (and reporting if you can install and load amd64-microcode with):
https://www.croatiafidelis.hr/gnu/deb/l ... 180204-21/
Pls. read there, and the links, for the details.