grsec / ksplice interaction

[mjbroekman]

I wasn't able to find anything in Google searches regarding this and the only reference I found here in from 2008, so I figure I'll ask.

Does ksplice work after grsec is enabled in the kernel? There's an application support thread here that says ksplice doesn't work with the disable modules feature of grsec. There's a thread I found in Google that says ksplice can be used to apply the grsec patches.

Just wondering how well ksplice and grsec are able to play together...

Thanks
Maarten

[spender]

You will need to be able to load modules (so you can't use disable_modules) but other than that the two should be compatible. Grsecurity allows modules to perform legitimate modifications of kernel code through standard interfaces.

-Brad

[mjbroekman]

Thanks for the clarification.