First of all, I love the project. I think it makes many necessary improvements to the current iteration of tails -- really, I think it might be closer to tails' original vision.
My only concern is the kernel. KPTI, the meltdown mitigation, was introduced with kernel 4.9.75. I was wondering if there was a rationale behind heads using a version that, while protected with grsec (which meltdown bypasses), is vulnerable to these exploits.
Hi,
First of all, I love the project. I think it makes many necessary improvements to the current iteration of tails -- really, I think it might be closer to tails' original vision.
My only concern is the kernel. KPTI, the meltdown mitigation, was introduced with kernel 4.9.75. I was wondering if there was a rationale behind heads using a version that, while protected with grsec (which meltdown bypasses), is vulnerable to these exploits.
Thanks for all you do!