Comment posted Install grsecurity kernel security from binary package (without kernel recompile) on Debian and Ubuntu by .
Recent comments by
Tags: alertTo, arbitrary code execution, audits, care, containment, cracker, deb packages, entire system, generation, gnu gpl, grsecurity, heap, heap corruption, image repository, information, Install, Install grsecurity kernel security from binary package (without kernel recompile) on Debian and Ubuntu, kernel image, kernel patch, kernelReduction, package, person, prevention, preventionPrevention, privilege, race, rbac, repo, repositories, restriction, role based access control, root, smashing, technique, time, tmp, tmp race, Ubuntu, variousof
Mozilla/5.0 (Windows NT 5.2; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
I tried to follow your advice but was unable to install and got this instead http://forums.debian.net/viewtopic.php?f=10&t=64843. Any help appreciated. Thanks.
View CommentView CommentMozilla/5.0 (X11; U; Linux x86_64; en-us) AppleWebKit/531.2+ (KHTML, like Gecko) Version/5.0 Safari/531.2+ Debian/squeeze (2.30.6-1) Epiphany/2.30.6
Hi thanks for pointing,
I forgot one command in the tutorial: apt-get update now it’s included in the tutorial.
In the mean time just in case if you don’t read this comment I also posted the command on forums.debian.net.
Please drop me a line fruther if all wents fine with the grsec kernel install.
View CommentView CommentBest
Georgi
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
Hello after adding your sources to mine and installing grsec on debian via apt-get i went to reboot and picked grsec for some reason when it goes to boot into gdm it doesn’t display anything it just shows the background wallpaper
View CommentView CommentMozilla/5.0 (X11; U; Linux x86_64; en-us) AppleWebKit/531.2+ (KHTML, like Gecko) Version/5.0 Safari/531.2+ Debian/squeeze (2.30.6-1) Epiphany/2.30.6
Hi, it might be some module in the kernel missing which you use for your graphic adapter check if all your modules with the normal kernel are properly loaded.
View CommentView CommentMozilla/5.0 (X11; U; Linux x86_64; en-us) AppleWebKit/531.2+ (KHTML, like Gecko) Version/5.0 Safari/531.2+ Debian/squeeze (2.30.6-1) Epiphany/2.30.6
I mean make a comparison between the loaded kernel modules with grsec kernel and the other normal kernel you used before.
Best!
View CommentView CommentGeorgi
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.23) Gecko/20110921 Ubuntu/10.04 (lucid) Firefox/3.6.23
Only installing linux-patch-grsecurity2 package onto Squeeze will_not_ work. Did you test this?
View CommentView CommentAccording to http://packages.debian.org/squeeze/all/ … 2/filelist, this only installs a patch file, which you should apply against kernel source tree.
1. Download kernel sources, patch them with this patch and rebuild kernel.
2. After rebooting with grsecurity-enabled kernel "uname -r" will show kernel version with appended "-grsec".
Mozilla/5.0 (X11; U; Linux x86_64; en-us) AppleWebKit/531.2+ (KHTML, like Gecko) Version/5.0 Safari/531.2+ Debian/squeeze (2.30.6-1) Epiphany/2.30.6
Hi simon,
Unfortunately I didn’t have the time to test it with Debian Squeeze. I’ve heard that it will be not working with Squeeze from debian mailing lists also.
best!
View CommentView CommentGeorgi
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.23) Gecko/20110921 Ubuntu/10.04 (lucid) Firefox/3.6.23
//EDIT I missed off the full URL in my post above:
View CommentView Commenthttp://packages.debian.org/squeeze/all/linux-patch-grsecurity2/filelist
Mozilla/5.0 (X11; Linux x86_64; rv:10.0.12) Gecko/20100101 Firefox/10.0.12 Iceweasel/10.0.12
I couldn't install it on last week's wheezy testing branch.
View CommentView CommentAm trying on this week's testing branch as soon I finish downloading.
Any new experience there?
Been trying hard and just can't make it:…
See:
http://forums.debian.net/viewtopic.php?f=5&t=103302
Any advice?