Grsecurity/Pax installation on Devuan GNU/Linux

miroR · 2018-08-10 13:26:16

https://www.croatiafidelis.hr/gnu/deb/l … 180810-06/
see previous posts for how to install it and other.

Last edited by miroR (2018-08-10 13:27:00)

miroR · 2018-08-17 19:42:22

https://www.croatiafidelis.hr/gnu/deb/l … 180816-16/
see previous posts for how to install it and other.

miroR · 2018-08-21 03:51:09

https://www.croatiafidelis.hr/gnu/deb/l … 180820-16/
see previous posts for how to install it and other.

miroR · 2018-09-14 18:23:13

https://www.croatiafidelis.hr/gnu/deb/l … 180914-10/
see previous posts for how to install it and other.

Last edited by miroR (2018-09-14 18:24:28)

miroR · 2018-09-24 10:40:11

https://www.croatiafidelis.hr/gnu/deb/l … 180924-07/
see previous posts for how to install it and other.

Last edited by miroR (2018-09-24 10:43:24)

miroR · 2018-10-07 13:40:46

Regarding a tiny comparison on Debian Forums at:
http://forums.debian.net/viewtopic.php? … 59#p679387

I wrote:

So... It's still probably safer with the free grsec kernel (dappersec)... Sorely missing the protections from Meltdown and Spectre, but most other protectiions are in place. And pls. note that it's a dev from the KSPP team. Hardly biased towards grsec.

No, it's probably not... While I haven't sudied those in depth, it's probably the Meltdown and Spectre that are the most important to have countermeasures in your kernel against, and grsec/dappersec can't at this time, and there seem no interest from spender and PaX Team, the authors... and grsec/dappersec can't protect you from those...
I think I'm closing my engagement with what is left in the open FOSS world of grsecurity.

See also:
https://github.com/dapperlinux/dapper-s … -427653248
and
https://github.com/minipli/linux-unoffi … -427652732

Regards!

groog.17 · 2019-01-13 10:38:11

miroR wrote:

and grsec/dappersec can't protect you from those...

In fact they can. https://grsecurity.net/respectre_announce.php

Respectre™ is a nod to the Spectre speculation attack and signifies that it (re)veals potential Spectre vulnerabilities, (re)spects the original intent of the code, and automatically (re)factors it via a compiler plugin to eliminate speculation-based side channels.

The point is how to get it, when they even do not answer emails.

Best regards.

The officially official Devuan Forum!

#26 2018-08-10 13:26:16

Re: Grsecurity/Pax installation on Devuan GNU/Linux

#27 2018-08-17 19:42:22

Re: Grsecurity/Pax installation on Devuan GNU/Linux

#28 2018-08-21 03:51:09

Re: Grsecurity/Pax installation on Devuan GNU/Linux

#29 2018-09-14 18:23:13

Re: Grsecurity/Pax installation on Devuan GNU/Linux

#30 2018-09-24 10:40:11

Re: Grsecurity/Pax installation on Devuan GNU/Linux

#31 2018-10-07 13:40:46

Re: Grsecurity/Pax installation on Devuan GNU/Linux

#32 2019-01-13 10:38:11

Re: Grsecurity/Pax installation on Devuan GNU/Linux

Board footer