Contents
What does grsecurity do in the Linux kernel?
About grsecurity. grsecurity® is an extensive security enhancement to the Linux kernel that defends against a wide range of security threats through intelligent access control, memory corruption-based exploit prevention, and a host of other system hardening that generally require no configuration.
Where can I get support for grsecurity software?
Commercial support for grsecurity is available through Open Source Security, Inc. In any kind of shared computing environment, whether it be simple UID separation, OpenVZ, LXC, or Linux-VServer, the most common and often easiest method of full system compromise is through kernel exploitation.
When did grsecurity version 4.9 come out?
Today’s release of grsecurity ® for Linux kernel version 4.9 makes good on our promise of publishing the implementation of the deterministic type-based return check portion of the Reuse Attack Protector (RAP) initially described at H2HC in October 2015.
Which is better for security Pax or grsecurity?
Few, if any, people can lay claim to a bigger impact on modern exploit mitigation than the PaX and grsecurity teams. Their work has shaped how security works today, and they continue to remain at the forefront. Grsecurity is built and trusted by experts.
Which is a major component of grsecurity approach?
A major component of grsecurity is its approach to memory corruption vulnerabilities and their associated exploit vectors.
Which is the first Linux kernel to contain rap?
Today’s release of grsecurity ® for the Linux 4.5 kernel marks an important milestone in the project’s history. It is the first kernel to contain RAP, a patented defense mechanism against code reuse attacks. RAP is the result of our multi-years research and development in Control Flow Integrity (CFI) technologies by PaX.
When was the first version of grsecurity released?
Grsecurity has been developed and maintained since 2001, from the very first 2.4 Linux kernel to the latest and greatest 5.x. In addition to tracking the latest stable kernel, we provide stable releases for both the 4.14 and 5.4 kernels with additional security backports.