Kernel config

[k0OA1]

Hi,

I've been using Gentoo Hardened for about a week. Today I configured the kernel so grsecurity and PaX were implemented.

Some confusion with paxctl-ng file modification and getting steam to work with proprietary Nvidia drivers noteably the steamui.so component.

I reverted the kernel config and now not using any grsec/PaX components, though I would like to use as many as possible without too much kerfuffle.

Is there a baseline kernel configuration that ramps up security, but does not require modifcation of files or any specific software procedures to get things working?

I understand this may require some detail.. if so I'm happy with just a few essential options to enable to get things started.



Thanks,




Al.

[Pallas]

Do you read this https://wiki.gentoo.org/wiki/Project:Hardened and this https://wiki.gentoo.org/wiki/Hardened/PaX_Quickstart ?

[k0OA1]

Thanks Pallas,

Yes, but I had used 'Automatic, Desktop, Performance' kernel config instead.

I'll try these settings,



cheers,


Al.