News for hackers. Stuff that matters.

A comment on The status of Linux kernel hardening. Parent comment

Re:The status of Linux kernel hardening by omginternets on Thursday November 10, 2016 @05:11AM (#12919154)
What's the easiest way to start?
[ Parent | on HN ]
Re:The status of Linux kernel hardening by majewsky on Thursday November 10, 2016 @05:36AM (#12919261)
Some distributions carry kernel images with the patchset, e.g. https://wiki.archlinux.org/index.php/Grsecurity
[ Parent | on HN ]
Re:The status of Linux kernel hardening by ckastner on Thursday November 10, 2016 @05:38AM (#12919269)
Debian recently started providing such images as well:

https://packages.debian.org/search?keywords=linux-image-grse...

https://wiki.debian.org/grsecurity

[ Parent | on HN ]
Re:The status of Linux kernel hardening by antocv on Thursday November 10, 2016 @07:07AM (#12919714)
Use alpine linux on your servers, it uses grsec by default, and if you can bear it - even on desktop with xfce4.

ArchLinux has linux-grsec as a package, its enough to pacman -S linux-grsec linux-grsec-headers and boot into it.

[ Parent | on HN ]
Re:The status of Linux kernel hardening by servilio on Friday November 11, 2016 @09:32AM (#12930899)
I can recommend Debian as well, used its grsec flavour of the Linux kernel package for a few months on my desktops successfully.

I would recommend taking a look at NixOS as well, they have it integrated and it can be as easy as adding an option to your system configuration. If you further add any customization, you will get a unique kernel build for your system, what is said to be ideal security-wise. You can read the details on their manual:

http://nixos.org/nixos/manual/index.html#sec-grsecurity

[ Parent | on HN ]