3 ms·
I haven't really explored this but I remember a few years ago I liked the idea of using grsecurity on my VPSs. Unfortunately I couldn't come up with a good way
by nchelluri 12y ago
I haven't really explored this but I remember a few years ago I liked the idea of using grsecurity on my VPSs. Unfortunately I couldn't come up with a good way to do it.
I believe the idea I stumbled onto was to use kexec to load a hardened kernel after boot, which seems doable but I am not sure it would be a good route to go.
Have you/anyone ever tried anything like this?
- elwin 12y agoLinode VPSs can boot custom kernels: https://www.linode.com/docs/tools-reference/custom-kernels-distros/run-a-custom-compiled-kernel-with-pvgrub https://www.linode.com/docs/tools-reference/custom-kernels-d... I don't know if this is possible with other providers.
- voltagex_ 12y agoEC2: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/UserProvidedKernels.html http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/UserProvi... DO: http://0wned.it/2014/08/27/custom-kernel-on-a-digitalocean-droplet-the-right-way/ http://0wned.it/2014/08/27/custom-kernel-on-a-digitalocean-d... Rackspace: http://www.rackspace.com/knowledge_center/article/linux-kernel-management http://www.rackspace.com/knowledge_center/article/linux-kern...