Search found 265 matches

by timbgo
2018-10-07 12:48
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

So... It's still probably safer with the free grsec kernel (dappersec)... Sorely missing the protections from Meltdown and Spectre, but most other protectiions are in place. And pls. note that it's a dev from the KSPP team. Hardly biased towards grsec. No, it's probably not... While I haven't sudie...
by timbgo
2018-08-21 20:19
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

The same script, on the latest stock Debian kernel: kconfig-hardened-check.py -c /boot/config-4.16.0-2-amd64 [+] Checking "/boot/config-4.16.0-2-amd64" against hardening preferences... option name | desired val | decision | reason || check result ===========================================...
by timbgo
2018-08-21 20:13
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

I am going to post what the script: https://github.com/a13xp0p0v/kconfig-hardened-check ( see here also: http://www.openwall.com/lists/kernel-hardening/2018/07/18/1 ) thinks about my latest offered packages (see immediately previous post to this). Pls. compare it to what that kconfig-hardened-check ...
by timbgo
2018-07-27 17:11
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

https://www.croatiafidelis.hr/gnu/deb/l ... 180727-10/ (under https://www.croatiafidelis.hr/gnu/deb/l ... c-current/)
Tested on three machines (but MBO are of only two kinds). No issues.
Refer to previous post for tips if needed.
by timbgo
2018-07-11 11:36
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

New stable packages:
https://www.croatiafidelis.hr/gnu/deb/l ... 180710-21/
( https://www.croatiafidelis.hr/gnu/deb/l ... c-current/ )
Any difficulty installing, pls. review previous long posts... (I'm probably too short on time currently)
by timbgo
2018-06-17 15:03
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

I don't talk politics, and the fact that the place where I can offer my kernels from is at my NGO's website, I don't think that should matter. Regarding this grsec topic, I'd realy kindly suggest that we don't talk politics. Yes, I agree, I probably shouldn't have posted that, sorry. Oh, you've tal...
by timbgo
2018-06-17 13:49
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

people should have a good look at that website Yes, the OP does seem quite delusional in respect of homosexuality and intergender conditions but the grsec patchset does offer some value. I don't talk politics, and the fact that the place where I can offer my kernels from is at my NGO's website, I d...
by timbgo
2018-06-16 17:52
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

https://www.croatiafidelis.hr/gnu/deb/linux-4.9.107-dappersec180615-20/ is now pointed to by: https://www.croatiafidelis.hr/gnu/deb/linux-deb-grsec-current/ Some new talk (some new indications) is at: not an issue, but lack of issues #5 https://github.com/dapperlinux/dapper-secure-kernel-patchset-st...
by timbgo
2018-06-01 12:40
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

The offered packages in the previous post (no issues have I had so far) are for any system hardware (well: x86_64 arch only). The best way is surely, to compile. Nothing wrong with the other option. It's only that tailoring the compiled kernel for only your hardware reduces the huge attack surface. ...
by timbgo
2018-06-01 10:59
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

The: https://www.croatiafidelis.hr/gnu/deb/linux-deb-grsec-current/ now points to: https://www.croatiafidelis.hr/gnu/deb/linux-4.9.92-dappersec180601-06/ That is the kernel package for Debian/Devuan that _may_ be worth trying out, bearing in mind the caveats of Dapper Linux patchset: https://dapperl...
by timbgo
2018-02-06 04:41
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

It might be worth trying (and reporting if you can install and load amd64-microcode with):
https://www.croatiafidelis.hr/gnu/deb/l ... 180204-21/
Pls. read there, and the links, for the details.
by timbgo
2018-02-04 06:53
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

Retpoline-patched grsecunoff (AMD, but no meltdown protection yet for Intel) available under the "current" link, or:
https://www.croatiafidelis.hr/gnu/deb/l ... 180203-22/
by timbgo
2018-01-13 15:24
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

@timbgo: How is grsecurity holding up against spectre/meltdown? Hard work to do, that's how... They need the code that spender and PaX Team left (the last publicly available grsecurity), and they're using it (always you will find they cite them as their source, e.g. in the patches if you subscribe ...
by timbgo
2017-12-21 06:41
Forum: Docs, Howtos, Tips & Tricks
Topic: Grsecurity/Pax installation on Debian GNU/Linux
Replies: 112
Views: 226778

Re: Grsecurity/Pax installation on Debian GNU/Linux

4.9.70 under: https://www.croatiafidelis.hr/gnu/deb/linux-deb-grsec-current/ (i.e. https://www.croatiafidelis.hr/gnu/deb/linux-image-4.9.70-grsecunoff-171220-11/ ) For those who verify, ls-1.sum.asc is missing. Busy, but it's coming later. EDIT 2017-12-21 09:28:41+00:00, there now: https://www.croat...