grsecurity forums

Hello,

I am not so new to grsecurity but i'm just not totally aware of how the version'ing things work out there, I see grsecurity 2.1.10 released for Linux 2.4.34/2.6.19.2 with some fixes as i can read in the news page, i was wondering if new versions of the grsecurity patch could be working on old kernel versions like the 2.6.18.2 one's for example, if so then how to get the new 2.1.10 for such an old kernel version or should i be upgrading to the new one?


,Thanks.
- m0dY

You should be upgrading to the new one, since security bugs are constantly fixed (either silently or publicly) in the Linux kernel itself, which won't be backported to your older kernel.

-Brad

So i assume from your covered reply that there is some security fixes were done in either linux kernel or grsec and were not advertised about or disclosed!

Also, kernel is having a new stable vanilla kernel within the time from 1 weeks to a month "not mentioning the rc's", Don't you think that it will be out of the logic scope if we are having lots of boxes to do reboot them for upgrading kernels each 1 weeks or so!?



,Thanks.
- m0dY

m0dY wrote:Don't you think that it will be out of the logic scope if we are having lots of boxes to do reboot them for upgrading kernels each 1 weeks or so!?

you have to reboot them if you are installing a newer grsec patch anyways, so i don't see what your point is here