Collaborate Disseminate
From here:
I have heard rumors of a grsecurity Wunderwaffe called AUTOSLAB. We don’t know much about it. Presumably, it makes Linux allocate kernel objects in separate slab caches depending on the object type. That could ruin the heap spr… Continue reading What is AUTOSLAB, and how does it work?
My question is similar to these:
Protect sensitive data from sysadmin prying eyes
Restrict access to a specific directory on Linux
From those, I understand that SELinux could accomplish my goal. But we do not have the r… Continue reading Restrict privileged users from accessing certain directories on Linux servers with Grsecurity?
“Kernel update will have some sort of security fixes that close up holes that have been discovered”
So newer kernel means less exploits.
For now newest kernel is 4.18-rc4 and newest kernel that support grsecurity is 4.14.55…. Continue reading What kernel is more secure?
What is KSPP? I saw it being compared to and called a competitor to grsecurity, but I can’t find a patch or Git repository to download.
Is it just an idea/manifesto or something real, with a concrete patch/repository to download (even if … Continue reading What is KSPP (Kernel self-protection project)?
I use hardened alpine, grsec is enabled by default, I also use docker, that’s fine, but I use a lot node-based images, node use jit, need to disable MPROTECT, I already done this for several images,
wekan https://github.co… Continue reading Should I use pax/grsecurity, why no one cares? [on hold]
From grsecurity announce (August 26, 2015):
The test series, unfit in our view for production use, will however continue to be available to the public to avoid impact to the Gentoo Hardened and Arch Linux communities
Does versions availa… Continue reading Are grsecurity kernels available through Arch and Gentoo repos suitable for production?