PaX - gresec patch

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

PaX - gresec patch

Vladimir Strycek
Hi all,

i heard some interesting stuff about grsec so i decide to install it and
found this in apt

chpax - user-space utility to control PaX flags
gradm2 - Administration program for the grsecurity2 RBAC based ACL system
kernel-patch-grsecurity2 - grsecurity kernel patch - new major upstream
version
paxctl - user-space utility to control PaX flags - new major upstream
version

Is it reasonable to install on production server ? what are proc and
cons of this kernel-patch-grsecurity2  ?

Do i need only kernel-patch-grsecurity2 , what are PaX flags ?

Thanks and best regards
Vladimir


--
To UNSUBSCRIBE, email to [hidden email]
with a subject of "unsubscribe". Trouble? Contact [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: PaX - gresec patch

Bernd Eckenfels
In article <[hidden email]> you wrote:
> Is it reasonable to install on production server ? what are proc and
> cons of this kernel-patch-grsecurity2  ?

You should not make changes to production servers without testing them...

Gruss
Bernd


--
To UNSUBSCRIBE, email to [hidden email]
with a subject of "unsubscribe". Trouble? Contact [hidden email]