The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
15 views

Haproxy don't work with second IP and Grsecurity

I have a VM (on XenServer) with Haproxy 1.5 and I try to make it work with a linux kernel 3.14.48 with the Grsecurity patch, compiled myself. The VM have 3 network interfaces : eth0 for the LAN ...
0
votes
0answers
17 views

How often recompile grsec patched kernel?

I plan to harden my corporate debian servers by using grsecurity patched kernel. However, I don't necessarily have time either to monitor each new security hole discovered nor to manually reconfigure ...
2
votes
2answers
70 views

How do I override grsec?

After a reboot recently, I have a pair of servers that are now unable to monitor their disk status. Nagios reports: HP RAID Array UNKNOWN Error: No controllers detected. -/-/- (LD : []) I get the ...
2
votes
2answers
280 views

can not run java inside grsec chroot

java runs well inside common chroot. however in a grsec hardened chroot it complains it has no enough memory to build VM. any ideas of how to make it run cause i really need a hardened chroot. ...
0
votes
1answer
91 views

Subversion - changing way of handling hooks

My hosting provider had enabled Trusted Path Execution (Grsec), so all my subversion hooks (for example post-commit) stopped working. Any attempt to commit something ends with warning: ...
0
votes
1answer
118 views

GRSEC Not allowing Active FTP on Privileged ports

I've been testing an issue with FTP Active transfers recently and I've narrowed down a problem. On my GRSEC enabled kernel, FTP Active transfers fail to establish on Privileged ports. Using identical ...
0
votes
1answer
277 views

grsecurity effieffectiveness test with latest proftpd remote exploit

i just tested grsecurity. i installed debian and a vulnerable version of proftpd. i launched an exploit. worked. patched the latest kernel with grsec. and now the exploit doesnt work anymore. BUT . ...
1
vote
1answer
224 views

How to block users from seeing others processes?

Generally it's one of the functionalities of (For example) grsecurity - user sees only his own processes, and not all others. But - I'd prefer to avoid installing grsecurity - perhaps something like ...
2
votes
5answers
324 views

controlling a linux box behind a router

I am trying to make it possible to control a shell on a linux box behind a router which is not under my control. My first idea was to make the client (the box behind the router) to ssh to a server ...
1
vote
2answers
1k views

Linux kernel with grsec + Java / Apache Tomcat

I've got a Debian Linux 64 bit dedicated server. The kernel has the grsec patch applied. I'm mainly using this server to run Apache Tomcat (6.0.26, Java 6) and everything seems fine. The only issue, ...