grsecurity users?

Adam Golebiowski adamg at pld-linux.org
Sat Nov 19 09:07:23 CET 2011


W dniu 2011-11-17 20:03, Tomasz Pala pisze:
> On Thu, Nov 17, 2011 at 19:34:21 +0100, Arkadiusz Miśkiewicz wrote:
>
>> I wonder if we have grsecurity users that use pld kernels?
>
> grep \=y kernel/kernel-grsec.config
>
> I guess there are many people not knowing they rely on grsec parts.
>
>> Asking because there was an idea of dropping grsec from default kernel which
>> can happen iif we have no users of this feature.
>>
>> I'm using one or two tiny features of grsec kernel and I can live without
>
> Like this?
>
> CONFIG_GRKERNSEC_PROC_USERGROUP=y
> CONFIG_GRKERNSEC_PROC_GID=17
>
> Without this one day people will hit exposed process data. That's my
> only concern, but personally I don't need it either.
>

Same here, personally I never used full grsec, but I'd leave 
grsec-minimal patch.

-- 
adamg at pld-linux.org


More information about the pld-devel-en mailing list