Comments on Hardening The Linux Kernel With Grsecurity (Debian)
Hardening The Linux Kernel With Grsecurity (Debian) Security is based on three characteristics: prevention, protection and detection. Grsecurity is a patch for Linux kernel that allows you to increase each of these points. This howto was performed on a Debian Lenny system. Thus some tools are Debian specific. However, tasks can be performed with other distro specific tools or even with universal tools (make).
3 Comment(s)
Comments
I tried the grsecurity package on a Lenny.
http://packages.debian.org/search?suite=lenny&searchon=names&keywords=grsecurity
However the configuration of Grsecurity is not in high-mode.
Don't forget that in low or medium mode, you only have userland ASLR.
If you look at http://debian.cr0.org/ there's packages for grsec kernels. They're not the most up to date, but decent enough if you want to test
If you are using Lenny or Sid (unstable), you can find a package for it to be installed instead of compiling the Kernel by hand.