Index of /~harry

Icon  Name                                                     Last modified      Size  Description
[DIR] Parent Directory - [TXT] changelog 07-Mar-2010 13:00 4.7K [   ] config-2.6.16.11-g-v 28-Apr-2006 16:23 35K [   ] config-2.6.16.16-g-v 30-May-2006 23:25 34K [   ] config-2.6.16.20-g-v 15-Jun-2006 11:09 35K [   ] config-2.6.17.7-g-v 01-Aug-2006 01:20 37K [   ] config-2.6.17.13-g-v 27-Sep-2006 10:02 38K [   ] config-2.6.18.2-g-v 08-Nov-2006 15:26 38K [   ] config-2.6.19.1-g-v 05-Jan-2007 17:22 41K [   ] config-2.6.19.7-g-v 12-Apr-2007 09:32 43K [   ] config-2.6.22.16-g-v 22-Jan-2008 15:25 43K [   ] config-2.6.22.19-g-v 04-Mar-2008 09:08 45K [   ] gradm-2.1.9-200602141850.tar.gz 15-Feb-2006 00:46 60K [   ] gradm-2.1.9-200608201448.tar.gz 24-Aug-2006 00:35 60K [   ] gradm-2.1.10-200702231759.tar.gz 23-Feb-2007 23:59 61K [   ] gradm-2.1.11-200708011700.tar.gz 01-Aug-2007 22:31 61K [DIR] ipv6/ 15-Apr-2008 11:01 - [   ] md5sums 08-Jan-2010 10:06 3.3K [TXT] patch-2.6.14.7-vs2.1.0-grsec2.1.9.diff 28-Feb-2006 01:41 1.5M [TXT] patch-2.6.17.11-vs2.0.2-grsec2.1.9.diff 05-Sep-2006 10:01 1.4M [TXT] patch-2.6.17.14-vs2.0.2.1-grsec2.1.9.diff 26-Oct-2006 15:27 1.4M [TXT] patch-2.6.18.2-vs2.1.1-grsec2.1.9.diff 09-Nov-2006 10:27 1.7M [TXT] patch-2.6.19.7-vs2.2.0-grsec2.1.10-20070402.diff 02-Apr-2007 08:55 1.6M [TXT] patch-2.6.21.5-vs2.2.0-rc3-grsec2.1.10-20070620.diff 20-Jun-2007 23:50 1.7M [TXT] patch-2.6.21.5-vs2.2.0-rc3-grsec2.1.10-20070628.diff 29-Jun-2007 00:08 1.7M [TXT] patch-2.6.21.6-vs2.2.0-grsec2.1.10-20070709.diff 10-Jul-2007 19:22 1.7M [TXT] patch-2.6.21.6-vs2.2.0.2-grsec2.1.10-20070718.diff 18-Jul-2007 17:53 1.7M [TXT] patch-2.6.21.6-vs2.2.0.3-grsec2.1.10-20070720.diff 20-Jul-2007 09:58 1.7M [TXT] patch-2.6.22.6-vs2.2.0.3-grsec2.1.11-20070905.diff 05-Sep-2007 18:13 1.8M [TXT] patch-2.6.22.10-vs2.2.0.4-grsec2.1.11-20071022.diff 24-Oct-2007 15:37 1.8M [TXT] patch-2.6.22.10-vs2.2.0.5-grsec2.1.11-20071105.diff 05-Nov-2007 09:17 1.8M [TXT] patch-2.6.22.12-vs2.2.0.5-grsec2.1.11-20071106.diff 05-Nov-2007 15:41 1.8M [TXT] patch-2.6.22.15-vs2.2.0.5-grsec2.1.11-20080111.diff 11-Jan-2008 15:40 1.8M [TXT] patch-2.6.22.16-vs2.2.0.6-grsec2.1.11-20080122.diff 22-Jan-2008 15:11 1.8M [TXT] patch-2.6.22.18-vs2.2.0.6-grsec2.1.11-20080212.diff 12-Feb-2008 17:48 1.8M [TXT] patch-2.6.22.19-vs2.2.0.6-grsec2.1.11-20080304.diff 04-Mar-2008 09:06 1.8M [TXT] patch-2.6.22.19-vs2.2.0.7-grsec2.1.11-20080317.diff 17-Mar-2008 15:37 1.8M [TXT] patch-2.6.26.7-vs2.3.0.35.6-grsec2.1.12-2008103101.diff 31-Oct-2008 16:05 1.9M [TXT] patch-2.6.27.10-vs2.3.0.36.4-grsec2.1.12-20090107.diff 10-Jan-2009 20:28 1.9M [TXT] patch-2.6.27.15-vs2.3.0.36.4-grsec2.1.12-20090210.diff 10-Feb-2009 20:55 1.9M [TXT] patch-2.6.29.2-vs2.3.0.36.12-grsec2.1.14-20090513.diff 13-May-2009 14:42 1.9M [TXT] patch-2.6.31.5-vs2.3.0.36.21-grsec2.1.14-20091105.diff 05-Nov-2009 12:12 2.3M [TXT] patch-2.6.31.5-vs2.3.0.36.23-grsec2.1.14-20091109.diff 09-Nov-2009 13:33 2.3M [TXT] patch-2.6.31.6-vs2.3.0.36.24-grsec2.1.14-20091112.diff 12-Nov-2009 15:10 2.3M [TXT] patch-2.6.31.6-vs2.3.0.36.24-grsec2.1.14-20091113.diff 13-Nov-2009 11:25 2.5M [TXT] patch-2.6.31.6-vs2.3.0.36.24-grsec2.1.14-20091116.diff 16-Nov-2009 09:29 2.5M [TXT] patch-2.6.31.6-vs2.3.0.36.26-grsec2.1.14-20091202.diff 02-Dec-2009 10:52 2.5M [TXT] patch-2.6.31.6-vs2.3.0.36.26-grsec2.1.14-20091207.diff 07-Dec-2009 11:29 2.5M [TXT] patch-2.6.31.6-vs2.3.0.36.27-grsec2.1.14-20091211.diff 11-Dec-2009 12:20 2.5M [TXT] patch-2.6.31.7-vs2.3.0.36.27-grsec2.1.14-20091211.diff 11-Dec-2009 12:20 2.5M [TXT] patch-2.6.31.7-vs2.3.0.36.27-grsec2.1.14-20091212.diff 12-Dec-2009 18:49 2.5M [TXT] patch-2.6.31.8-vs2.3.0.36.27-grsec2.1.14-20091215.diff 15-Dec-2009 15:26 2.5M [TXT] patch-2.6.31.8-vs2.3.0.36.27-grsec2.1.14-20091216.diff 16-Dec-2009 12:43 2.5M [TXT] patch-2.6.31.9-vs2.3.0.36.27-grsec2.1.14-20091221.diff 21-Dec-2009 14:34 2.5M [TXT] patch-2.6.31.9-vs2.3.0.36.28-grsec2.1.14-20100104.diff 04-Jan-2010 17:01 2.5M [TXT] patch-2.6.31.10-vs2.3.0.36.28-grsec2.1.14-20100107.diff 17-Jan-2010 12:41 2.5M [TXT] patch-2.6.31.11-vs2.3.0.36.28-grsec2.1.14-20100117.diff 17-Jan-2010 12:41 2.5M [TXT] patch-2.6.31.12-vs2.3.0.36.28-grsec2.1.14-20100303.diff 03-Mar-2010 19:13 2.5M [TXT] patch-2.6.32.8-vs2.3.0.36.28-grsec2.1.14-20100212.diff 12-Feb-2010 18:08 2.4M [TXT] patch-2.6.32.8-vs2.3.0.36.29-grsec2.1.14-20100213.diff 13-Feb-2010 12:53 2.4M [TXT] patch-2.6.32.8-vs2.3.0.36.29.1-grsec2.1.14-20100216.diff 16-Feb-2010 11:05 2.5M [TXT] patch-2.6.32.8-vs2.3.0.36.29.1-grsec2.1.14-20100224.diff 24-Feb-2010 09:41 2.5M [TXT] patch-2.6.32.9-vs2.3.0.36.29.2-grsec2.1.14-20100303.diff 03-Mar-2010 19:26 2.5M [TXT] patch-2.6.32.9-vs2.3.0.36.29.2-grsec2.1.14-20100307.diff 07-Mar-2010 12:59 2.5M [TXT] patch-2.6.32.9-vs2.3.0.36.29.2-grsec2.1.14-20100308.diff 08-Mar-2010 10:23 2.5M [TXT] patch-2.6.32.9-vs2.3.0.36.29.2-grsec2.1.14-20100312.diff 12-Mar-2010 14:47 2.5M [DIR] scripts/ 22-Jan-2008 15:23 -
grsecurity + vserver patches for 2.6 kernels.
---------------------------------------------

* these are just a merge, there is a very secure config that you can use as an
  example

* watch out for chroot restrictions, since vserver uses chroot ;)
  some sane defaults, which have proven to work on all my (and matti's, tnx dude) boxes:
  CONFIG_GRKERNSEC_CHROOT=y
  # CONFIG_GRKERNSEC_CHROOT_MOUNT is not set
  # CONFIG_GRKERNSEC_CHROOT_DOUBLE is not set
  CONFIG_GRKERNSEC_CHROOT_PIVOT=y
  CONFIG_GRKERNSEC_CHROOT_CHDIR=y
  # CONFIG_GRKERNSEC_CHROOT_CHMOD is not set
  CONFIG_GRKERNSEC_CHROOT_FCHDIR=y
  CONFIG_GRKERNSEC_CHROOT_MKNOD=y
  CONFIG_GRKERNSEC_CHROOT_SHMAT=y
  CONFIG_GRKERNSEC_CHROOT_UNIX=y
  # CONFIG_GRKERNSEC_CHROOT_FINDTASK is not set # don't enable this if you plan to use chroot stuff in vps'es, if not: go right ahead... not that it's very useful in vservers... ;)
  CONFIG_GRKERNSEC_CHROOT_NICE=y
  CONFIG_GRKERNSEC_CHROOT_SYSCTL=y
  # CONFIG_GRKERNSEC_CHROOT_CAPS is not set

* be careful when using PREEMPT, since the pax team doesn't support it (officially... it could/should work tough...)

* 20091221: an important bug has been fixed (kernel panics because of a REFCOUNT overflow... thanks to kbad and the grsecurity/pax team)

maintained by harry