3 ms·
A couple of times the grsecurity patch has prevented a machine of mine being exploited - the first time the exploit didn't work at all and the second grsecurity
by sillysaurus3 9y ago
A couple of times the grsecurity patch has prevented a machine of mine being exploited - the first time the exploit didn't work at all and the second grsecurity added enough protection that the kernel crashed and rebooted.
Out of curiosity, how did you determine that someone was trying to exploit you? And that the kernel crash was due to an attack?
- muppetman 9y agoBoth times friends of mine with shell accounts tried the last kiddy exploit. First time they fessed up they'd tried it and said it didn't work, the second time apologised for causing the box to reboot.
- SAI_Peregrinus 9y agoSince crashes (especially segfaults) are often indications of an exploitable vulnerability causing the kernel to crash isn't exactly a good thing. It prevented one attack, caused a (probably short) denial of service, and may be further exploitable.
- ryanlol 9y agoGrsec doesn't magically make bugs go away, it just makes many of them unexploitable, or at least very hard to exploit.