grsecurity forums

Hi,

I am thinking about installing grsecurity enhanced kernel on my server which is running RedHat 7.3, with CPanel/WHM 5.3.0 is it compatible with my server ?

Also I heard that the grsecurity enhanced kernel can restricted ssh/shell how does this work, in the fact of adding clients to the restricated ssh list ? and will this affect the root access for username: root

Regards,
Garry

I don't know about recent CPanel versions, but I do know that it used to work fine with CPanel. grsecurity has a feature called TPE, which I think is what you're talking about. It only allows a non-root user (so it does not restrict what root can do) to execute "trusted" binaries: ones in root-owned non-world writable directories.

-Brad