The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
14 views

How to enable RBAC automatically

I think I'm missing something simple, but every time I try to gradm -E, I'm being asked for a password. How can I enable it automatically after boot? (so that no password is needed)
1
vote
0answers
37 views

Segmentation faults in hardened ubuntu

I am running Ubuntu Linux 14.04 webserver and it has grsec patch applied. Absolutely randomly websites become unaccessible and i seeing segmentation faults in dmesg. May i temporary or permanently ...
0
votes
0answers
26 views

Haproxy don't work with second IP and Grsecurity

I have a VM (on XenServer) with Haproxy 1.5 and I try to make it work with a linux kernel 3.14.48 with the Grsecurity patch, compiled myself. The VM have 3 network interfaces : eth0 for the LAN ...
0
votes
0answers
22 views

How often recompile grsec patched kernel?

I plan to harden my corporate debian servers by using grsecurity patched kernel. However, I don't necessarily have time either to monitor each new security hole discovered nor to manually reconfigure ...
2
votes
2answers
116 views

How do I override grsec?

After a reboot recently, I have a pair of servers that are now unable to monitor their disk status. Nagios reports: HP RAID Array UNKNOWN Error: No controllers detected. -/-/- (LD : []) I get the ...
2
votes
2answers
318 views

can not run java inside grsec chroot

java runs well inside common chroot. however in a grsec hardened chroot it complains it has no enough memory to build VM. any ideas of how to make it run cause i really need a hardened chroot. ...
0
votes
1answer
92 views

Subversion - changing way of handling hooks

My hosting provider had enabled Trusted Path Execution (Grsec), so all my subversion hooks (for example post-commit) stopped working. Any attempt to commit something ends with warning: ...
0
votes
1answer
126 views

GRSEC Not allowing Active FTP on Privileged ports

I've been testing an issue with FTP Active transfers recently and I've narrowed down a problem. On my GRSEC enabled kernel, FTP Active transfers fail to establish on Privileged ports. Using identical ...
0
votes
1answer
288 views

grsecurity effieffectiveness test with latest proftpd remote exploit

i just tested grsecurity. i installed debian and a vulnerable version of proftpd. i launched an exploit. worked. patched the latest kernel with grsec. and now the exploit doesnt work anymore. BUT . ...
1
vote
1answer
230 views

How to block users from seeing others processes?

Generally it's one of the functionalities of (For example) grsecurity - user sees only his own processes, and not all others. But - I'd prefer to avoid installing grsecurity - perhaps something like ...
2
votes
5answers
331 views

controlling a linux box behind a router

I am trying to make it possible to control a shell on a linux box behind a router which is not under my control. My first idea was to make the client (the box behind the router) to ssh to a server ...
1
vote
2answers
1k views

Linux kernel with grsec + Java / Apache Tomcat

I've got a Debian Linux 64 bit dedicated server. The kernel has the grsec patch applied. I'm mainly using this server to run Apache Tomcat (6.0.26, Java 6) and everything seems fine. The only issue, ...