Fedora Core 4 Plans

[John Richard Moser]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Jeff Waugh wrote:
> <quote who="Joe Zicarelli">
> 
>>* Java - More native-compiled GCJ stuff. Including Eclipse.
>>
>>Would GCJ be anything Ubuntu take advantage of?  From what I understand
>>distributing any decent java-vm is a licencing mess.
> 
> 
> Yeah, sorting out Free Java stuff on Ubuntu would be great. Jeff Bailey has
> offered to drive this forward, so give him a yell (or check out the wiki
> pages and discuss stuff here).

What we need is Kaffe to actually work in the real world, and then to be
rewritten (along with Mono) following my idea[1] for a secure JIT
compiler.  This idea applies to JITs, but not realtime machine emulators
like VMWare or Qemu (which can satisfy least privileges via proper
mprotect() usage; java and mono can be tighter, not even being allowed
to do such mprotect()s).

If Martin Pitt and the other devs manage to get GrSecurity in, Java and
Mono will have to be marked properly to work under PaX (by removing the
restrictions); hopefully someone can energize upstream Mono devs to
rewrite so that the full protection of PaX can be lain upon them and
they can nestle into a secure environment.

Ah well, in relation to security, Ubuntu's job starts at "Do we want
GrSecurity in our kernel" and ends at "Yes->paxctl; No->[NULL]"; I'm
just ranting.

[1] http://www.kaffe.org/pipermail/kaffe/2004-October/099938.html

> 
> - Jeff
> 

- --
All content of all messages exchanged herein are left in the
Public Domain, unless otherwise explicitly stated.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFB/X3ChDd4aOud5P8RArRUAJ9rIfJ+iCFwxNsTYzSSTn77mfGBuwCfZ6Ir
apnFQyajM51+P7L1oRlPFhM=
=vTGf
-----END PGP SIGNATURE-----