Re: Kernel patches (was: tcb for debian?)
On Mon, 27 Jan 2003 14:01, martin f krafft wrote:
> also sprach Russell Coker <firstname.lastname@example.org> [2003.01.27.1217 +0100]:
> > However I believe that until SE Linux, RSBAC, and GRSEC get wider use in
> > Debian there is no point in even talking about getting such a change into
> > Debian. Currently people who want this can always have their own patched
> > libc6, and people who are interested in maintaining it can run their own
> > private apt repository for it.
> I use grsecurity, but realize that there are other kernel patch suites
> like grsecurity out there -- openwall seems to be one.
> Where can I find a qualitative comparison of those?
I don't know of any. I would be happy to help writing one...
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page