3 ms·
Can anyone share their experiences with the grsecurity/pax patches? I have only used it on firewalls that had no responsibilities other than moving packets. Hav
by dfc 14y ago
Can anyone share their experiences with the grsecurity/pax patches? I have only used it on firewalls that had no responsibilities other than moving packets. Have you had any issues using the patches on machines with more responsibilities (www/db/mail) and/or greater user interaction ie. desktop use??
- nisa 14y agoI used it on several multi-purpose machines, no desktop through. I just patched the stock Ubuntu kernel¹. If you enable pax you have to watch out for applications that are incompatible with it. GRUB, Java, mod_python broke out of the box, but you can change the flags for pax on a per binary basis. It's probably useful to write some apt rules to apply the changes on every update of the program. Otherwise there where no problems. Using RBAC and configuring it on the other hand is a more difficult process. 1: http://compilefailure.blogspot.de/2011/02/grsecurity-patched-ubuntu-server-lts.html http://compilefailure.blogspot.de/2011/02/grsecurity-patched...