From: Sandino Araico Sánchez (sandino_at_sandino.net)
Date: Thu 10 Jun 2004 - 08:14:58 BST
Herbert Poetzl wrote:
>>The current vserver+grsecurity is working perfectly well for me on my
>>systems. I've been using Sandino Araico Sanchez's vserver+grsec
>>patch and they've been stable as a rock.
>>
>>
>
>as far as I know, a 'working' vserver/grsec combo
>was done several times, but not seriously tested,
>and as far as I heard, there where some issues ...
>
>
There are some issues whth usage of ACLs and dropping CAP_SYSADMIN
Unfortunately I haven't had as much spare time as I need to dig into
that issues and it seems quite complex.
>nevertheless, if grsec is going to perish, for
>whatever reason, it might be interesting to absorb
>those parts useful for linux-vserver into a security
>branch of linux-vserver ...
>
>(would be 2.6 branch of course)
>
>best,
>Herbert
>
>
>
>>>From: Sandino Araico Sánchez <sandino_at_sandino.net>
>>>I've just uploaded the patch Vserver 1.27 + GR Security 1.9.14 against
>>>2.4.25 to
>>>http://www.sandino.net/parches/vserver/linux-2.4.25-grsec-1.9.14-vserver-1.>27.patch.gz
>>>
>>>
>>--
>>Luke Computer Science System Administrator
>>Security Administrator,College of Engineering
>>Montana State University-Bozeman,Montana
>>
>>
>>
>>_______________________________________________
>>Vserver mailing list
>>Vserver_at_list.linux-vserver.org
>>http://list.linux-vserver.org/mailman/listinfo/vserver
>>
>>
>_______________________________________________
>Vserver mailing list
>Vserver_at_list.linux-vserver.org
>http://list.linux-vserver.org/mailman/listinfo/vserver
>
>
-- Sandino Araico Sánchez -- ... there's no spoon ..._______________________________________________ Vserver mailing list Vserver_at_list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver