README

From Linix VServer
Revision as of 00:22, 11 November 2025 by 192.168.65.1 (talk) (Restored content from Wayback Machine)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

grsecurity + vserver patches for 2.6 kernels. --------------------------------------------- * these are just a merge, there is a very secure config that you can use as an example * watch out for chroot restrictions, since vserver uses chroot ;) some sane defaults, which have proven to work on all my (and matti's, tnx dude): CONFIG_GRKERNSEC_CHROOT=y # CONFIG_GRKERNSEC_CHROOT_MOUNT is not set # CONFIG_GRKERNSEC_CHROOT_DOUBLE is not set CONFIG_GRKERNSEC_CHROOT_PIVOT=y CONFIG_GRKERNSEC_CHROOT_CHDIR=y # CONFIG_GRKERNSEC_CHROOT_CHMOD is not set CONFIG_GRKERNSEC_CHROOT_FCHDIR=y CONFIG_GRKERNSEC_CHROOT_MKNOD=y CONFIG_GRKERNSEC_CHROOT_SHMAT=y CONFIG_GRKERNSEC_CHROOT_UNIX=y # CONFIG_GRKERNSEC_CHROOT_FINDTASK is not set # don't enable this if you plan to use chroot stuff in vps'es, if not: go right ahead... not that it's very useful in vservers... ;) CONFIG_GRKERNSEC_CHROOT_NICE=y CONFIG_GRKERNSEC_CHROOT_SYSCTL=y # CONFIG_GRKERNSEC_CHROOT_CAPS is not set * for questions/remarks/... mail me. if you like it/use it, tell me, so i know that this stuff is used by other people than me, and that i don't do this only for myself! :) maintained by harry