Skip to main content

Questions tagged [grsecurity]

A set of Linux kernel security-oriented patches implementing, among others, least privilege control for memory pages and other resources.

Filter by
Sorted by
Tagged with
0 votes
1 answer
280 views

Restrict privileged users from accessing certain directories on Linux servers with Grsecurity?

My question is similar to these: Protect sensitive data from sysadmin prying eyes Restrict access to a specific directory on Linux From those, I understand that SELinux could accomplish my goal. ...
MountainX's user avatar
  • 340
3 votes
1 answer
2k views

What is KSPP (Kernel self-protection project)?

What is KSPP? I saw it being compared to and called a competitor to grsecurity, but I can't find a patch or Git repository to download. Is it just an idea/manifesto or something real, with a concrete ...
Vi.'s user avatar
  • 219
1 vote
0 answers
605 views

Sandboxing applications and files in Debian & GrSecurity [closed]

I'm about to switch from Linux Mint to Debian. But before doing that I'm still looking into a few things to secure Debian. 1) The first thing I want is a kind of 'sandboxing' technology. This to ...
O'Niel's user avatar
  • 2,916
2 votes
1 answer
213 views

Are grsecurity kernels available through Arch and Gentoo repos suitable for production?

From grsecurity announce (August 26, 2015): The test series, unfit in our view for production use, will however continue to be available to the public to avoid impact to the Gentoo Hardened and Arch ...
olmstad's user avatar
  • 123
5 votes
1 answer
1k views

How does reuse attack protection (RAP) work?

The grsecurity folks just released a test patch for the 4.5 Linux kernel which includes Return Address Reuse Attack Protection or RAP, a protection technique against return-oriented programming (ROP). ...
jotik's user avatar
  • 311
13 votes
2 answers
958 views

concrete real-life examples where grsecurity prevented an exploit

From theoretical point of view, grsecurity kernel patch looks like a great hardening tool. Most importantly, PaX seems like a good idea. Do these theoretical advantages have indeed practical effect ...
Martin Vegter's user avatar
13 votes
2 answers
6k views

Is server hardening with grsecurity really necessary on the CentOS 6.3 environment?

I consider myself to be reasonably good with IT, however I am relatively fresh at server and system administration. I am a web developer for my company and I have been charged with setting up and ...
Pierce's user avatar
  • 233