Re: GNU Boot patches: update to GRUB 2.12 with various fixes

[Adrien 'neox' Bourmault]

Le jeudi 18 janvier 2024 à 00:50 +0100, Denis 'GNUtoo' Carikli a
écrit :
> I think that the last option is at the same time the best one and the
> one that requires the least amount of efforts.

I'm seconding that. Upstreaming seems to me the best one and the one
that requires the least amount of immediate efforts and maintainance in
the future.

> The first two options also increase the risk of other kinds of
> attacks
> as we'd be shipping code that was not reviewed by upstream and that
> might have memory safety issues.

Also that implies additional maintenance efforts as these patches in
the long run.
-- 
Adrien Bourmault
Maintainer, GNU Boot project
Associate member, Free Software Foundation
GPG : 9AA8CDA0DC9C0604D26AE4A72974E1D5F25DFCC8