On 14/05/2011 09:01, Sandino Araico Sánchez wrote:
> After the refcount fix (thanks Rik for your advice) I have the new
> kernel running for more than 23 hours with no visible failure.
> The vserver patch against a grsec-patched kernel:
> The combined patch against 184.108.40.206 vanilla:
Do also consider if you need the extra stuff in grsec or just the pax
part? I'm moving quickly to the opinion that pax is the main useful
thing on a vserver based server (assuming little/nothing running the
host). Herbert suggests that most of the chroot restrictions are
already taken care of by vserver code?
Received on Wed May 18 18:10:21 2011