1544748212 Q * any0n Ping timeout: 480 seconds 1544748298 J * any0n ~k@4G4AAAQBX.tor-irc.dnsbl.oftc.net 1544759029 Q * _Shiva__ Ping timeout: 480 seconds 1544759263 J * _Shiva_ shiva@whatcha.looking.at 1544776132 J * hijacker ~nikolay@149.235.255.3 1544778239 M * thithib hello! 1544778295 M * thithib aren't there some 'vx_locks_dec()' calls missing in fs/locks.c in latest "experimental" patches? 1544778551 M * thithib I'm comparing to what we've done in the CLIP OS port of vserver: https://github.com/clipos-archive/src_platform_clip-patches/blob/master/1502_vserver-vs2.3.9.7-anssi.patch#L3698 1544790241 Q * Aiken Remote host closed the connection 1544791353 Q * hijacker Remote host closed the connection 1544792235 N * Bertl_oO Bertl 1544792268 M * Bertl thithib: quite possible 1544792342 M * Bertl if I see that correctly, you have your own branch of Linux-VServer patched kernel, yes? 1544793489 M * thithib Bertl: yes, we had ported the patch for our 4.4 kernel a few years ago (and then for 4.9) 1544793599 M * thithib and when you released the two experimental patches for those versions in last January, we compared what we had to your version :) 1544793675 M * thithib and so now we'd be happy to discuss differences we have with you 1544793719 M * Bertl sounds great! your patches are in active use? 1544793733 M * thithib yes 1544793758 M * thithib in CLIP OS 4 1544793811 M * thithib for CLIP OS 5, we may use other container solution but we want to keep the xid/nid thing, so we are working on a "light" version of Linux-VServer as a Linux Security Module 1544793812 A * Bertl is reading up on CLIP OS ... 1544793905 M * Bertl ah, nice, so recently published (out of the depths of potential GPL infringements :) 1544794064 M * thithib it wasn't public anyway, just used by the French administration 1544794128 M * AlexanderS thithib: "the nid thing"? So you try to port the network context stuff as Linux Security Module? It will be possible f.e. to use a network context with LXC? 1544794372 M * thithib AlexanderS: it's not currently implemented but we'd like to do that, yes 1544794392 M * AlexanderS Cool. 1544794712 M * Bertl thithib: no problem ... so the diff you linked is between your latest and my latest version, yes? 1544794908 M * thithib for 4.9 yes 1544795064 M * thithib I took notes, when comparing with your last release, about stuff we could discuss 1544795092 M * thithib the lock thing mentioned above being the first one :) 1544796919 M * Ghislain oh i foresee a good WE bertl ;p 1544796946 M * Ghislain now we are two for patch review eheh, double the fun 1544796974 M * Bertl ah, that's simple, my colleague Ghislain will do that :) 1544796982 M * Ghislain looool 1544796993 M * Bertl he is an aspiring kernel hacker, so no big deal there :) 1544797007 M * Ghislain i am a kernel developer, my experience is going way back last week , a little respect please ! 1544797468 M * Ghislain i am working on a php port of the kernel in my spare time, got an issue having php run before the kernel boots 1544800320 J * hijacker ~nikolay@external.oldum.net 1544800943 Q * any0n Ping timeout: 480 seconds 1544801084 J * any0n ~k@4G4AAAQ3A.tor-irc.dnsbl.oftc.net 1544805238 Q * hijacker 1544808651 J * Aiken ~Aiken@b951.h.jbmb.net 1544817707 M * Guy- :) 1544817729 M * Guy- thithib: good to have you here; I love what you're doing with CLIP OS (found out about it a few months ago) 1544817765 M * Guy- thithib: any chance of getting a NATO certification on it? that'd be great 1544817779 M * Guy- (and I hope you guys have the resources to pull it off) 1544817820 M * Guy- failing that, a German BSI certification would already help tons :) 1544818012 M * thithib Guy-: Thanks :) 1544818146 M * thithib it's a bit early to talk about certifications and all as we have a lot of stuff to do (we're redeveloping many parts of CLIP OS), but yes it will come anyway 1544818195 M * Guy- thithib: I think your organization should reach out to BSI, because the BSI definitely needs something like this for Germany 1544818234 M * Guy- thithib: I would normally hesitate to speak well of government organizations, especially in the context of IT security, but the BSI seems to be on the ball 1544818270 M * Guy- thithib: and they might even be able to shake lose some developer hours, who knows 1544818277 M * Guy- *loose 1544818387 M * Guy- thithib: another potential ally would be the Dutch government, which maintains a special branch of OpenVPN certified for NATO Restricted and its national equivalen 1544818391 M * Guy- t 1544818483 M * Guy- thithib: in Germany, CLIP OS could be an alternative to some elements of Secunet's SINA product line, which is expensive as f* and not a pleasure to use, or so I am told 1544818545 Q * ntrs resistance.oftc.net graviton.oftc.net 1544818569 J * ntrs ~ntrs@vault08.rosehosting.com 1544824613 M * Bertl off to bed now ... have a good one everyone! 1544824614 N * Bertl Bertl_zZ 1544824669 J * fstd ~fstd@xdsl-85-197-55-235.nc.de 1544825118 Q * fstd_ Ping timeout: 480 seconds