I recently learned about openwall patch and i got a question.

m0rt3r · 07-11-2004, 06:51 PM

I'm currently running slackware 10 with the 2.4.26 kernel. A couple of days ago i learned about openwall kernel patch.
So i'm wondering if this patch is recommended for a home computer.
I've also been searching this forum for some info on this patch and i came across other patch called GRSecurity.
Which of this patches do you guys use, or which would you recommend for a newbie?
Oh before i forget. when it comes the time to upgrade my kernel due to some security issue with it, should i upgrade the kernel with the upgrade from slackware, or should i upgrade the kernel with any new patch openwall releases, or should i upgrade the kernel with an upgrade slackware provides and then patch that kernel with a new patch from openwall? I hope i'm making any sense to you guys

Thank you for any replies.

qwijibow · 07-11-2004, 08:31 PM

Quote:

when it comes the time to upgrade my kernel due to some security issue with it, should i upgrade the kernel

i think the slackware 10 2.4 kernel is vunerable to the "evil" exploit that locks up the system.

chort · 07-12-2004, 03:12 AM

Update the Slackware kernel source, then apply the Openwall patch again and compile the new kernel.

Oh yeah, make sure you keep a copy of your old kernel and it's modules, just in case the Openwall patch doesn't "play nice" with the newer source from Slackware. This is a problem with third party patches because you can never guarantee that they'll work if the source they're patching gets changed.