Re: [gentoo-dev] grsecurity in default kernel

[Guido Bakker]

As i see workstations, you don't offer remote shells, that would make it a
server already.. my hacked adsl modem with nat only allows sshd from the
outside... and sets state on sessions from the inside.. so when i want i can
ssh in, but that's just me... everything else is blocked from the internet...

i checked out grsecurity before and it looks promising, but the openwall
 patch from solardesigner is nice as well.. what's best? i wouldn't enable it
 standard as it can block certain things too...

just make it an option..

--
Guido

Ok, but i think grsecurity is something else. This seems to be a
user-mode application.

In my opinion you can enable grsecurity with some options on
workstation's, too.
Have you ever look at the new options from a grsecurity patched kernel.
What's could be against to make a workstation computer same secure as a
server?

Through the sysctl interface you could apply this to any kernel and
active the options
you want through a config-file and a init.d script i have posted some
days ago.
But I really think that all workstations could enable some options as
default.

Regards

Sebastian Werner

Am 24.12.2001 10:57:46, schrieb Guido Bakker <guidob@g.o>:
>I think it should be an option in the installer in the future...
>Security patches for a workstation have no use in my opinion...
>
>You could also look at the attachment which is from SUN...
>
>--
>Guido
>
>
>Hey
>
>i think it's nice to patch gentoo's default kernel with grsecurity
>(www.grsecurity.net). You integrate so many patches. Grsecurity enhance
>the security for the normal internet-user. I think it's a must in any
>default-kernel!
>
>Regards
>
>Sebastian Werner
>
>
>
>_______________________________________________
>gentoo-dev mailing list
>gentoo-dev@g.o
>http://lists.gentoo.org/mailman/listinfo/gentoo-dev