I'm just getting started with grsecurity-1.9.6-2.4.19.patch.gz and I've come across a problem: Setting rand_tcp_src_ports to 1 seems to do nothing on my machine. It still appears to be generating source port numbers sequentially:
[root@host /proc/sys/kernel/grsecurity]# echo 1 > rand_tcp_src_ports
[root@host /proc/sys/kernel/grsecurity]# cat rand_tcp_src_ports
1
[root@host /proc/sys/kernel/grsecurity]# ssh otherhost 'echo $SSH_CLIENT'
192.168.0.1 32797 22
[root@host /proc/sys/kernel/grsecurity]# ssh otherhost 'echo $SSH_CLIENT'
192.168.0.1 32798 22
[root@host /proc/sys/kernel/grsecurity]# ssh otherhost 'echo $SSH_CLIENT'
192.168.0.1 32799 22
(Notice 32797, 32798, 32799...)
Am I missing something...?