Important question before i install!

[alex809]

Hello
So i am considering installing Gsecurity onto my VPS before i upload my site to the VPS.
Now i want to use the latest software without messing anything up so i have come here to ask first.

My VPS runs CentOS 6 x86 (32bit)
I first off installed a webserver to it (A nice one that also comes with CSF Firewall, This webserver to be precise: http://centos-webpanel.com/features) and that's actually still installing as i post this thread.

Now i am going to continue trying to secure and harden the VPS till i feel satisfied.

Now onto Gsecurity stuff.
I noticed the latest version is: 3.0-3.2.60

and reading the installation / download guide (From gsecurity docs, Which seems pretty straightforward) i came accross this:

When downloading gradm, the administration utility for grsecurity's role-based access control system, you must download the version that matches the version of the grsecurity patch you downloaded. Gradm is located on the same download page as grsecurity.

But looking on the downloads page i don't see GDRam that corresponds with the latest version, I can only locate this version on the downloads page: gradm-3.0-201405281853.tar.gz

So do i use that gdram version with the latest version of Gsecurity?
I don't want to mess up my server while trying to secure it. That would just suck.

[spender]

Hi,

The current "grsecurity version" is 3.0. This is unrelated to whatever kernel versions the grsecurity patch is applied to and mostly has to do with the version of grsecurity's RBAC system. When I make some backward-compatibility-breaking change, I increment the version. So the gradm version that is currently on the site will work fine with any patch you're currently downloading from the site.

There's nothing to worry about wrt accidentally using a wrong version of gradm -- if it's the wrong version the kernel will tell you and won't allow you to load the policy. You won't use gradm anyway unless you're using grsecurity's RBAC system.

-Brad

[alex809]

Ok, Thank you.
I will let you guys know if i had any problems or not