LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
LinkBack Search this Thread
Old 04-08-2005, 08:45 AM   #1
XaViaR
Member
 
Registered: Dec 2004
Distribution: RHEL, CentOS, SuSE
Posts: 170

Rep: Reputation: 30
grsecurity vs selinux vs lids


I was wondering which patch is recommened over the over. I am trying to learn how to secure the kernel, and I, of course, would like to learn the security patch that is the best.

currently i have a 2.4 and 2.6 kernel (i have two machines).

thanks in advance!
:-)
 
Old 04-08-2005, 11:48 AM   #2
broch
Member
 
Registered: Feb 2005
Distribution: Arch current, SuSe 10.1 32-bit, FreeBSD current, OpenBSD 4.0
Posts: 453

Rep: Reputation: 30
RSBAC:
http://www.rsbac.de/

but for a newbie grsecurity is easier to learn
 
Old 04-08-2005, 12:05 PM   #3
XaViaR
Member
 
Registered: Dec 2004
Distribution: RHEL, CentOS, SuSE
Posts: 170

Original Poster
Rep: Reputation: 30
is grsecurity as good as the others??
 
Old 04-08-2005, 02:55 PM   #4
broch
Member
 
Registered: Feb 2005
Distribution: Arch current, SuSe 10.1 32-bit, FreeBSD current, OpenBSD 4.0
Posts: 453

Rep: Reputation: 30
It is easier to configure and it does pretty good job for workstation.
Remember that aplying patches does nothing, you need to know how to configure SELinux or RSBAC.
Few examples:
atfer aplying RSBAC and rebooting you will not be able to login for the first time (or at all if you don't know how to enable soft mode), you need to know what to do, where you passwords will go, your /var/log/message will grow to ~500MB in the first few hours if you don't know how to manage it, and so on.

So start with easy (and really good) grsecurity. Still you may not be able to start X or X may freeze randomly, if you don't know how to configure it. So don't worry there is enough to learn from grsecurity.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
mail server grsecurity-selinux zuessh Linux - Security 1 04-26-2005 01:52 PM
LIDS, GRsecurity, RSBAC, SElinux DJ Cacophony Linux - Security 1 10-01-2004 06:14 PM
LIDS question Di0de Linux - Security 2 09-03-2003 04:35 PM
Lids blueplazma Linux - Security 1 06-12-2003 03:14 AM
Lids nautilus_1987 Linux - Security 2 08-30-2002 03:14 AM


All times are GMT -5. The time now is 09:42 AM.

Main Menu
 
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: @linuxquestions
Open Source Consulting | Domain Registration