Gentoo Logo
Gentoo Spaceship

Installation:
Gentoo Handbook
Installation Docs

Documentation:
Home
Listing
About Gentoo
Philosophy
Social Contract

Resources:
Bug Tracker
Developer List
Discussion Forums
Gentoo BitTorrents
Gentoo Linux Enhancement Proposals
IRC Channels
Mailing Lists
Mirrors
Name and Logo Guidelines
Online Package Database
Security Announcements
Staffing Needs
Supporting Vendors
View our CVS

Graphics:
Logos and themes
Icons
ScreenShots

Miscellaneous Resources:
Gentoo Linux Store
Gentoo-hosted projects
IBM dW/Intel article archive




List Archive: gentoo-hardened
Navigation:
Lists: gentoo-hardened: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-hardened@g.o
From: Marco Venutti <veeenrg@...>
Subject: Re: "How hard" is Linux kernel-side hardening?
Date: Mon, 21 Sep 2009 17:10:26 +0200
--[cut]--<br>Remember that RSBAC does not work with PaX on a recent kernels. <br>--[cut]--<br>
<br>Thank you, &#39;cause this point <br>(the presence of a usable PaX) <br>is important to me!<br><br>--[cut]--<br>While there are some problems with keeping hardened-sources up<br>to date in Portage. ;) So you better use kernel patches from here:<br>
<a href="http://www.grsecurity.net/%7Espender/" target="_blank">http://www.grsecurity.net/~spender/</a><br>--[cut]--<br>
<br>I see the GR-Security, provided in Hardened Gentoo,<br>is not the bare patch, but an &quot;itself-patched&quot; version, <br>so I&#39;m wondering if these improvements become<br>part of the (following releases of the) official patch,<br>
or not; I&#39;m asking this just because, if improvements<br>are not included in the official patch, maybe it&#39;s better,<br>for me, to use the gentoo-hardened-kernel-source,<br>not-so-up-to-date, but improved!<br>What do you think about this?<br>
<br><br><br>
Replies:
Re: "How hard" is Linux kernel-side hardening?
-- RB
References:
"How hard" is Linux kernel-side hardening?
-- Marco Venutti
Re: "How hard" is Linux kernel-side hardening?
-- Pavel Labushev
Navigation:
Lists: gentoo-hardened: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: "How hard" is Linux kernel-side hardening?
Next by thread:
Re: "How hard" is Linux kernel-side hardening?
Previous by date:
Re: "How hard" is Linux kernel-side hardening?
Next by date:
Re: "How hard" is Linux kernel-side hardening?


Updated Nov 22, 2009

Donate to support our development efforts.

Gentoo Centric Hosting: vr.org

VR Hosted

Tek Alchemy

Tek Alchemy

SevenL.net

SevenL.net

php|architect

php|architect

Copyright 2001-2007 Gentoo Foundation, Inc. Questions, Comments? Email www@gentoo.org.