4 ms·
It also kind of sucks how grsec has remained out of tree for a decade. Its pretty much the most comprehensive security kernel there is, and all its features are
by zanny 11y ago
It also kind of sucks how grsec has remained out of tree for a decade. Its pretty much the most comprehensive security kernel there is, and all its features are kflags tweakable, but it remains a third party patchset despite providing a laundry list of extremely useful security features, most of which have no performance impact.
Its kind of silly that Apparmor is in tree but PAX is not.
- RRRA 11y agoIndeed, I never understood why they couldn't make a bit of effort and at least allow GRSec as a build option so it can be enabled by default on at least the server distro which are willing to waste 2% speed for some practical security layers... It's really sad, everyone want that.
- gonzo 11y agoNot everyone, no.