Linux kernel: multiple x86_64 vulnerabilities

Re:Linux kernel: multiple x86_64 vulnerabilities by nchelluri on Wednesday December 17, 2014 @04:24PM (#8764439)

I haven't really explored this but I remember a few years ago I liked the idea of using grsecurity on my VPSs. Unfortunately I couldn't come up with a good way to do it.

I believe the idea I stumbled onto was to use kexec to load a hardened kernel after boot, which seems doable but I am not sure it would be a good route to go.

Have you/anyone ever tried anything like this?

[ Parent | on HN ]

Re:Linux kernel: multiple x86_64 vulnerabilities by elwin on Wednesday December 17, 2014 @05:40PM (#8764815)

Linode VPSs can boot custom kernels: https://www.linode.com/docs/tools-reference/custom-kernels-d...

I don't know if this is possible with other providers.

[ Parent | on HN ]

Re:Linux kernel: multiple x86_64 vulnerabilities by voltagex_ on Wednesday December 17, 2014 @06:19PM (#8765052)

EC2: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/UserProvi...

DO: http://0wned.it/2014/08/27/custom-kernel-on-a-digitalocean-d...

Rackspace: http://www.rackspace.com/knowledge_center/article/linux-kern...

[ Parent | on HN ]