Re: [gentoo-hardened] Hardening a Kernel post hardened-sources

[Alex Efros]

Hi!

On Wed, Mar 28, 2018 at 06:06:00PM +0100, Robert Sharp wrote:
> Does anyone know of a good, post GRSecurity guide to reasonable security
> for the kernel? In the absence of anything else I will have to go back
> to the KSPP list and start removing stuff until I can get a stable kernel.

I'm using https://github.com/minipli/linux-unofficial_grsec, but it lacks
Spectre and Meltdown mitigation at the moment (see issues). Still, I
believe it's the best we can have now (better is probably paid GrSec, but
AFAIK it's impossible or too costly to buy it for home or small business).

-- 
			WBR, Alex.