grsecurity forums

"If you're going to use 2.6.7, please also apply fixes for the numerous security bugs present in that kernel. Due to significant changes in the "stable" 2.6 tree that break much of PaX, a 2.6.8 patch may not be coming soon"

Where can i find this "apply fixes for the numerous security bugs present in that kernel"

I should patch this "numerous bugs" first and then patch my kernel by grsec.patch?

Urbiusz

I might get yelled at for this but...

I'd say get genpatches-2.6-7.44-base.tar.bz2 from a gentoo mirror and apply the included 1xxx patches. This should take care of the security issues in 2.6.7.

I'm wondering when the grsec-sources for gentoo will start using 2.6.x kernels, personally.

Eien wrote:I'm wondering when the grsec-sources for gentoo will start using 2.6.x kernels, personally.

hardened-dev-sources have grsecurity patches and some other security fixes.

Energ wrote:hardened-dev-sources have grsecurity patches and some other security fixes.

Thanks for the information! I used these sources on the reinstall of my webserver and I don't have any complaints yet.