Hacker News new | ask | show | jobs
by yousry 3428 days ago
Why should I not use GRSecurity?

Comparison matrix;

https://grsecurity.net/compare.php

3 comments

I guess because of this:

>Since September 9, 2015, the availability of stable grsecurity patches has become limited to the commercial customers of grsecurity.

Probably because those devs didn't found another way of getting the community to pay for their bills.
Why should I trust a page with checkboxes under GRsecurity and X's under everything else?
It's trustworthy, it's just misleading. GRsecurity is a whole suite of security related patches/modules that SELinux/Apparmor don't do and have never claimed to do because they're 'just' about MAC.
There's nothing wrong with that.
With RBAC you effectively have to create your own policy for the whole system. I'm not aware of any successful projects providing a full, generic profile.

But ideally, you could be using Grsec without RBAC, but with SELinux.