Questions tagged [grsecurity]

A set of Linux kernel security-oriented patches implementing, among others, least privilege control for memory pages and other resources.

Filter by
Sorted by
Tagged with
2
votes
1answer
793 views

What is KSPP (Kernel self-protection project)?

What is KSPP? I saw it being compared to and called a competitor to Grsecurity, but I can't find a patch or Git repository to download. Is it just an idea/manifesto or something real, with a concrete ...
1
vote
0answers
378 views

Sandboxing applications and files in Debian & GrSecurity [closed]

I'm about to switch from Linux Mint to Debian. But before doing that I'm still looking into a few things to secure Debian. 1) The first thing I want is a kind of 'sandboxing' technology. This to ...
2
votes
1answer
99 views

Does grsecurity kernels available through Arch and Gentoo repos suitable for production?

From GrSecurity announce (August 26, 2015): The test series, unfit in our view for production use, will however continue to be available to the public to avoid impact to the Gentoo Hardened and ...
5
votes
1answer
812 views

How does reuse attack protection (RAP) work?

The grsecurity folks just released a test patch for the 4.5 Linux kernel which includes Return Address Reuse Attack Protection or RAP, a protection technique against return-oriented programming (ROP). ...
13
votes
2answers
812 views

concrete real-life examples where grsecurity prevented an exploit

From theoretical point of view, grsecurity kernel patch looks like a great hardening tool. Most importantly, PaX seems like a good idea. Do these theoretical advantages have indeed practical effect ...
12
votes
2answers
6k views

Is server hardening with grsecurity really necessary on the CentOS 6.3 environment?

I consider myself to be reasonably good with IT, however I am relatively fresh at server and system administration. I am a web developer for my company and I have been charged with setting up and ...