Doubt elrepo.org and Grsecurity

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Doubt elrepo.org and Grsecurity

Postby nelsonq » Thu Jul 03, 2014 11:02 am

Hi.

I updated my kernel with elrepo.org
to 3.10.46-1.el6.elrepo.i686 (My system is Centos 6.5)

Now I want to use the grsecurity patch, my question is:

¿ Can use grsecurity ?

Thank you very much for your time, I appreciate your response.
nelsonq
 
Posts: 3
Joined: Thu Jul 03, 2014 10:56 am

Re: Doubt elrepo.org and Grsecurity

Postby nelsonq » Mon Jul 07, 2014 10:36 am

Hi ¿can anyone give me their opinion about this issue?

Thank you.
nelsonq
 
Posts: 3
Joined: Thu Jul 03, 2014 10:56 am

Re: Doubt elrepo.org and Grsecurity

Postby N8Fear » Mon Jul 07, 2014 11:22 am

Yes, you can use grsecurity, but you will likely have to compile your kernel yourself. As far as I can tell, elrepo doesn't provide a grsecurity patched kernel. Depending on what you want to do you'll likely need additional userspace tools like paxctl (or chpax or paxctl-ng) and gradm.
N8Fear
 
Posts: 37
Joined: Thu Jan 17, 2013 5:01 am

Re: Doubt elrepo.org and Grsecurity

Postby nelsonq » Mon Jul 07, 2014 4:00 pm

Hi there N8Fear.

I'll Investigate about paxctl, chpax, gradm and paxctl-ng, thanks.
nelsonq
 
Posts: 3
Joined: Thu Jul 03, 2014 10:56 am


Return to grsecurity support