4 ms·

grsecurity, i like it. pretty secure for my machine. never had any breakage... i think Linus should probarbly pay more attention to security issues in 'his' os

grsecurity, i like it. pretty secure for my machine. never had any breakage... i think Linus should probarbly pay more attention to security issues in 'his' os instead of being ratty about people taking it in their own hands to fix it... if u want to know: you can increase the stack guard page for grsecurity too, as theirs is also way small... On the otherhand i dont see why a kernel doesn't track it's stack pointers and heap allocations to see if there is overlap, its basic idea and stupid that they ever dared to say this is not exploitable. Even though not many ppl seem to have looked at it and/or done it, its plainly obvious there is an issues with there being a possibility of overlap;. The stack guard page is a stupid mechanism which at best causes an application crash (fking handle that shit properly??) masked as 'security incident'.... that being said, linux, grsecurity, still my main choice, still much love for linus and grsecurity folks. whish they could get along better and perhaps someday think of actual solutions instead of infinite bandaids!

majewsky 9y ago
> grsecurity, i like it. pretty secure for my machine. never had any breakage... Pretty weak argument. I'm running stock Linux without grsec and I've never had any breakage either. > i think Linus should probably pay more attention to security issues What makes you think that he doesn't? Also, there is a whole separate team (the Kernel Self Protection Project) working on the issue.
- sighsagain 9y ago
  > What makes you think that he doesn't? Also, there is a whole separate team (the Kernel Self Protection Project) working on the issue. the fact that all the KSSP has been doing is copying grsecurity code is a pretty good indication that he doesn't because the same code they are copy pasting is the code he is calling garbage. And he's saying to not bother with the patchset that has made it so no public linux vulnerability affected my kernel in at least a year. Let me repeat that. My kernel has not had one public reported security vulnerability in a year.

majewsky 9y ago

> grsecurity, i like it. pretty secure for my machine. never had any breakage... Pretty weak argument. I'm running stock Linux without grsec and I've never had any breakage either. > i think Linus should probably pay more attention to security issues What makes you think that he doesn't? Also, there is a whole separate team (the Kernel Self Protection Project) working on the issue.

sighsagain 9y ago
> What makes you think that he doesn't? Also, there is a whole separate team (the Kernel Self Protection Project) working on the issue. the fact that all the KSSP has been doing is copying grsecurity code is a pretty good indication that he doesn't because the same code they are copy pasting is the code he is calling garbage. And he's saying to not bother with the patchset that has made it so no public linux vulnerability affected my kernel in at least a year. Let me repeat that. My kernel has not had one public reported security vulnerability in a year.