Hacker News new | ask | show | jobs
by lloeki 5255 days ago
it affects only 2.6.39 and up.

EDIT: sorry, misread the parent.

1 comments

I know. I want to know if someone with a kernel >=2.6.39 and applied grsecurity patch can successfully use this exploit or if grsecurity protects from this exploit.
Just tried it on 3.0.4 with grsecurity enabled, and it didn't work, so there.
Thanks. I guess It's finally time for me to move every machine to a grsecurity kernel.
Would you be interested in a grsecurity distro?
I'd love to see up to date stable grsecurity kernel repositories for the major distributions (ubuntu, debian, rhel/centos) that provide patched versions of the distribution kernel. You can configure most of grsecurity via the sysctl interface. At the moment it is always a bit of hassle to patch & compile a kernel from hand even with the great debian/ubuntu kernel-package.

I don't think I'll use an extra distribution. But something like a hardened LAMP/LAPP stack for shared hosting out of the box in a distribution would be great (I think in terms of easy chrooting of users and php, secure permissions, etc.pp) However, I guess everyone has different needs and there is no one size that fits for all.

Why is grsecurity not merged upstream?