News for hackers. Stuff that matters.

A comment on Grsecurity Developer Spender's Feelings on the State of Linux Security. Parent comment

Re:Grsecurity Developer Spender's Feelings on the State of L... by hiphopyo on Friday November 06, 2015 @11:10AM (#10520182)
Some interesting insights on Grsecurity's approach by OpenBSD's Nick Holland in the comments section:

https://www.digitalocean.com/community/tutorials/an-introduc...

[ Parent | on HN ]
Re:Grsecurity Developer Spender's Feelings on the State of L... by j_s on Friday November 06, 2015 @11:16AM (#10520215)
Link directly to the comment:

https://www.digitalocean.com/community/tutorials/an-introduc...

And here is the referenced email with a bit of context:

http://osdir.com/ml/general/2014-02/msg44493.html

[ Parent | on HN ]
Re:Grsecurity Developer Spender's Feelings on the State of L... by _yy on Friday November 13, 2015 @07:02AM (#10559351)
He's actually talking about the SELinux/"RBAC in general" approach. His only criticism of Grsecurity is that it's not in the mainline and therefore not as effective as it could be.
[ Parent | on HN ]
Re:Grsecurity Developer Spender's Feelings on the State of L... by aidenn0 on Friday November 06, 2015 @01:17PM (#10520949)
Substitute "Untrusted user" for "possibly buggy server code" and you will see why Grsecurity's approach can have value in single-user systems.
[ Parent | on HN ]