http://linux-vserver.org/index.php?title=Openwall&feed=atom&action=historyOpenwall - Revision history2024-03-28T16:14:05ZRevision history for this page on the wikiMediaWiki 1.20.2http://linux-vserver.org/index.php?title=Openwall&diff=4994&oldid=prevGlenn: catspec2011-10-21T20:45:01Z<p>catspec</p>
<table class='diff diff-contentalign-left'>
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;'>
<td colspan='2' style="background-color: white; color:black;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black;">Revision as of 20:45, 21 October 2011</td>
</tr><tr><td colspan="2" class="diff-lineno">Line 27:</td>
<td colspan="2" class="diff-lineno">Line 27:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>or whatever you like. :)</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>or whatever you like. :)</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td></tr>
<tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>[[Category:<del class="diffchange diffchange-inline">Documentation</del>]]</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>[[Category:<ins class="diffchange diffchange-inline">Software under linux-vserver</ins>]]</div></td></tr>
</table>Glennhttp://linux-vserver.org/index.php?title=Openwall&diff=4965&oldid=prevGlenn: +cat2011-10-21T19:57:57Z<p>+cat</p>
<table class='diff diff-contentalign-left'>
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;'>
<td colspan='2' style="background-color: white; color:black;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black;">Revision as of 19:57, 21 October 2011</td>
</tr><tr><td colspan="2" class="diff-lineno">Line 26:</td>
<td colspan="2" class="diff-lineno">Line 26:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>  make-kpg --revision=131 kernel_image  </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>  make-kpg --revision=131 kernel_image  </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>or whatever you like. :)</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>or whatever you like. :)</div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;"></ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">[[Category:Documentation]]</ins></div></td></tr>
</table>Glennhttp://linux-vserver.org/index.php?title=Openwall&diff=3691&oldid=prevJze: migrated from old wiki Openwall2009-04-01T07:39:07Z<p>migrated from old wiki Openwall</p>
<p><b>New page</b></p><div>Patches are available at [http://www.openwall.com/linux/ Openwall]. <br />
<br />
The nice thing of the Openwall security patches are that they apply very cleanly together with the vserver patches. No rediffing or manually applying is necesaary, making them more reliable in my eyes. Since I don't use the ACLs of grsec this works just as fine in my opinion.<br />
<br />
I've been using them together for a few months now without any issues.<br />
<br />
The procedure is very simple. Before you apply the vserver (ctx) patch, you apply the openwall patch. An example would be like this:<br />
tar jxf linux-2.4.24.tar.bz2 <br />
cd linux-2.4.24 <br />
cat ../linux-2.4.24-ow1/linux-2.4.24-ow1.diff > patch -p1 <br />
bzcat ../patch-2.4.24-vs1.24.diff.bz2 | patch -p1 <br />
make menuconfig <br />
<br />
I enabled all security options:<br />
CONFIG_HARDEN_STACK=y<br />
CONFIG_HARDEN_STACK_SMART=y<br />
CONFIG_HARDEN_LINK=y<br />
CONFIG_HARDEN_FIFO=y<br />
CONFIG_HARDEN_PROC=y<br />
CONFIG_HARDEN_RLIMIT_NPROC=y<br />
CONFIG_HARDEN_SHM=y<br />
<br />
And this hasn't given me any issues yet. After this, finish off with:<br />
make dep && make bzImage && make modules && make modules_install <br />
or <br />
make-kpg --revision=131 kernel_image <br />
or whatever you like. :)</div>Jze