grsecurity forums

Hey,
first I'd like to thank the whole Grsec-Dev Team for all the work they efford :)

But (as nearly erveryone here xD) I have a question too:

will you release a grsec patch for kernel 2.6.27.36?

atm my machine has this version installed, but it feels naked xD

I'm afraid of installing the 2.6.27.10 version because of the famous sendpage exploit (i know, pax would fix this, but i dont use pax as i need as much performance as possible)


would be really nice if you release a 2.6.27.36 patch :)



greez Freaker

maybe: you can make a "grseconly" patch - as this - without pax - maybe with interdiff -, if you don't use PaX.

For example from official pax-2.6.27.10 and official grsec-2.6.27.10.

This "new" patch works with 2.6.27.36 (maybe).

freaker wrote:will you release a grsec patch for kernel 2.6.27.36?

as always, we only track the latest linux version, so there will be no more patches for .27 either.

thats really sad...

but 2.6.27.37 is just as new as the current 2.6.31.4 (12.10.2009) ;)

and the 27er versions are much better for high performance server, so grsec would be really useful for these, as grsec is especially useful for server-kernel


greez Freaker

freaker wrote:thats really sad...

but 2.6.27.37 is just as new as the current 2.6.31.4 (12.10.2009)

the core of .27 is one year old, well over 200MB of patches entered into linux since, maybe 0.5% of that is in the latest .27. you can imagine that we've changed our code as well and we simply don't have the time to support more than the current version.