Re: [gentoo-hardened] hardened-sources + vserver?

[Ned Ludd]

On Thu, 2007-04-12 at 00:40 +0200, Natanael Copa wrote:
> On Wed, 11 Apr 2007 14:58:41 -0700
> Ned Ludd <solar@g.o> wrote:
>
> > On Wed, 2007-04-11 at 23:40 +0200, Natanael Copa wrote:
> > > On Wed, 11 Apr 2007 12:20:32 -0700
> > > Ned Ludd <solar@g.o> wrote:
> > >
> > > > On Wed, 2007-04-11 at 20:51 +0200, Natanael Copa wrote:
> > > > > Hi,
> > > > >
> > > > > Are there any plans for official vserver+grsecurity sources? They have
> > > > > patches on the vserver frontpage.
> > > >
> > > > Not officially. But users report being able to swap in the vserver
> > > > patched grsec easy enough over the 4450_grsec.. But long term I do not
> > > > think this is something hardened directly wishes to support cuz the
> > > > patching tends to involve ~30 or so rejects.
> > >
> > > why not use the patches on vanilla?
> >
> > vanilla or not. grsec-only and vserver touch several of the same areas
> > the in a kernel.
>
> I don't quite follow. Will the
> http://people.linux-vserver.org/~harry/patch-2.6.19.7-vs2.2.0-grsec2.1.10-20070402.diff vserver+grsec patch they provide on the vserver frontpage
> http://linux-vserver.org not "just work" on vanilla?

probably would work.. guessing vanilla is what they base the patch on
anyway. But either way it's not something that hardened itself directly
wishes to support at this time..

Good luck however.



> I have not yet tried vserver. A user requested it and i have also been looking for a paravirtualization for grsec latetly. Seems like vserver is the only thing that works with grsec uless you have VT hardware or run full virtualization like vmware. (the user said it was even possible to run vserver inside vmware)
>
> Natanael Copa
-- 
Ned Ludd <solar@g.o>
Gentoo Linux

-- 
gentoo-hardened@g.o mailing list