Package: paxrat Severity: wishlist Version: 1.0-2 User: tails-...@boum.org Usertags: hardening
Hi, It's great that there's APT integration to take care of the package installation and upgrade issue, but how about the first time one reboots into their PaX-enabled kernel? Likely they won't have run paxrat manually yet, so the first boot may be problematic (e.g. GDM won't start). This would be a non-issue if paxrat was during (early) boot. Subgraph OS does that using a live-config hook, which is of course not applicable in the general case. So I suggest adding a systemd unit file, or whatever appropriate solution the maintainers prefer. Cheers, -- intrigeri
