Re: [vserver] Patch for vserver + GR Security

From: Ed W <>
Date: Wed 18 May 2011 - 18:10:10 BST
Message-ID: <>

On 14/05/2011 09:01, Sandino Araico Sánchez wrote:
> After the refcount fix (thanks Rik for your advice) I have the new
> kernel running for more than 23 hours with no visible failure.
> The vserver patch against a grsec-patched kernel:
> The combined patch against vanilla:


Do also consider if you need the extra stuff in grsec or just the pax
part? I'm moving quickly to the opinion that pax is the main useful
thing on a vserver based server (assuming little/nothing running the
host). Herbert suggests that most of the chroot restrictions are
already taken care of by vserver code?


Ed W
Received on Wed May 18 18:10:21 2011

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Wed 18 May 2011 - 18:10:22 BST by hypermail 2.1.8