Grsecurity/Pax installation on Debian GNU/Linux

Share your own howto's etc. Not for support questions!

Re: Grsecurity/Pax installation on Debian GNU/Linux

Postby n_hologram » 2018-01-13 14:28

@timbgo: How is grsecurity holding up against spectre/meltdown?
bester69 wrote:There is nothing to install in linux, from time to time i go to google searching for something fresh to install in linux, but, there is nothing
n_hologram
 
Posts: 387
Joined: 2013-06-16 00:10

Re: Grsecurity/Pax installation on Debian GNU/Linux

Postby timbgo » 2018-01-13 15:24

n_hologram wrote:@timbgo: How is grsecurity holding up against spectre/meltdown?

Hard work to do, that's how... They need the code that spender and PaX Team left (the last publicly available grsecurity), and they're using it (always you will find they cite them as their source, e.g. in the patches if you subscribe to KSPP)...
But, as...
minipli wrote:Expect it to be weeks/months/never. It's a pretty invasive change conflicting with a lot of PaX. :(

(pls. see that issue for details)
Things are probably happening, but slowly...
timbgo
 
Posts: 250
Joined: 2013-04-14 12:17

Re: Grsecurity/Pax installation on Debian GNU/Linux

Postby timbgo » 2018-02-04 06:53

Retpoline-patched grsecunoff (AMD, but no meltdown protection yet for Intel) available under the "current" link, or:
https://www.croatiafidelis.hr/gnu/deb/l ... 180203-22/
timbgo
 
Posts: 250
Joined: 2013-04-14 12:17

Re: Grsecurity/Pax installation on Debian GNU/Linux

Postby timbgo » 2018-02-06 04:41

It might be worth trying (and reporting if you can install and load amd64-microcode with):
https://www.croatiafidelis.hr/gnu/deb/l ... 180204-21/
Pls. read there, and the links, for the details.
timbgo
 
Posts: 250
Joined: 2013-04-14 12:17

Previous

Return to Docs, Howtos, Tips & Tricks

Who is online

Users browsing this forum: No registered users and 1 guest

fashionable