| 1 |
>> > How about hardened? Does ZFS have any problems interacting with |
| 2 |
>> > grsecurity or a hardened profile? |
| 3 |
>> |
| 4 |
>> Has anyone tried hardened and ZFS together? |
| 5 |
> |
| 6 |
> I did - I had some problems, but I'm not sure if they were caused by the |
| 7 |
> combination of ZFS and hardened. There were some issues updating kernel and ZFS |
| 8 |
> (most likely due to ZFS on root and me using ~arch hardened-sources and the |
| 9 |
> live ebuild for zfs). |
| 10 |
> There are some hardened options that are known to be not working (constify was |
| 11 |
> one of them but that should be patched now). I think another one was HIDESYM. |
| 12 |
> |
| 13 |
> There is a (more or less regularly updated blogpost by prometheanfire |
| 14 |
> (installation guide zfs+hardened+luks [1]). |
| 15 |
> So you could ask him or ryao (he seems to support hardened+zfs at least to |
| 16 |
> a certain degree). |
| 17 |
> [1] https://mthode.org/posts/2013/Sep/gentoo-hardened-zfs-rootfs-with-dm-cryptluks-062/ |
| 18 |
|
| 19 |
Thanks for the link. It doesn't look too bad. |
| 20 |
|
| 21 |
- Grant |
Archives