grsecurity 199e patch on parisc-linux 2.4.20p32
dear debian developers,
this weekend i succeeded in setting up my first debian-hppa box with a
customized parisc-linux.org kernel with the grsecurity 1.9.9e patch.
with the help of Brad Spengler it was possible to fit his patch to the
latest parisc-linux 2.4.20 kernel and set up a demo machine.
the patches are at http://nikita.ath.cx/users/pappy/grsec
i also provided a compiled kernel (without module support) for a 712 and
a config file for grsec for evaluational purposes.
please feel free to follow me up and ask questions about this.
the box is currently running and the 2 minor issues with PAGE EXEC
should be resolved in the near future.
i am looking forward to 2.0 where grsec will come up with role-based
behaviour and full distinction support for remote/local processes via
ip-based access control lists.
as far as i know, the grsec functionality is the first project to
effectively harden the linux kernel for hp/9000 machines.
www.grsecurity.net has details about the functionality provided by
Brad's team.
a comparison to the commercial HP/9000 praesidium IDS from HP would be
welcome.
have a nice day,
Alex
--
pub 1024/05E1A80C 2001/12/16 Alexander Gabert (http://nikita.ath.cx) <pappy@nikita.ath.cx>
Key fingerprint = 2D 84 B0 CB F5 67 8A 22 8D 37 6E 6B 8A 3B 7F D6 05 E1 A8 0C
Reply to: