Gentoo Archives: gentoo-hardened

From: Marcel Meyer <meyerm@××××××.de>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] gentoo hardened in VMware
Date: Fri, 15 Sep 2006 09:40:23
Message-Id: 200609151138.03220.meyerm@fs.tum.de
1 Hello together,
2
3 I want to setup a few hardened/grsecurity Gentoo VMs which will work on an
4 ESX afterwards. Now, if I recall correctly, the performance of a test
5 installation some time ago was awful. Since I let the system compile over
6 night I only saw this when the system was complete and tried to get it to
7 work on the server.
8
9 I think disabling SSP _or_ the "NX-bit" in the kernel (x86-32) helped to get
10 a significant performance boost (but perhaps I'm just imagining sth. since
11 it seems logical/possible for me ;-) ). The last post on this list I found
12 was from 2004 mentioning potential problems with pageexec - is this it?
13
14 My question is, can that be? Who is using hardned gentoos within some
15 vmware-vms? How do I get good performance *g* (speak: which options not to
16 use)? When it's only stuff in the kernel, it is easy to test out. But
17 recompiling the whole system wouldn't be that funny ;)
18
19 Hopefully this question is understandable :) Thank you for your time,
20
21 Marcel
22 --
23 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] gentoo hardened in VMware pageexec@××××××××.hu