On 14/05/2011 09:01, Sandino Araico Sánchez wrote:
> After the refcount fix (thanks Rik for your advice) I have the new
> kernel running for more than 23 hours with no visible failure.
>
> The vserver patch against a grsec-patched kernel:
> http://sandino.araico.net/parches/vserver/patch-2.6.38.4-vs2.3.0.37-rc15-against-grsec-2.2.2-201104232142-KB2-unstable.diff
>
> The combined patch against 2.6.38.4 vanilla:
> http://sandino.araico.net/parches/vserver/patch-2.6.38.4-vs2.3.0.37-rc15-grsec-2.2.2-201104232142-KB2-unstable.diff
Superb
Do also consider if you need the extra stuff in grsec or just the pax
part? I'm moving quickly to the opinion that pax is the main useful
thing on a vserver based server (assuming little/nothing running the
host). Herbert suggests that most of the chroot restrictions are
already taken care of by vserver code?
Cheers
Ed W
Received on Wed May 18 18:10:21 2011