Re: grsecurity in kernel? [ doc and "PaX performance impact"]

2010-12-29 Thread Glenn
At 23:38 +0100 29/12/10, Vinzenz Hersche wrote: Glenn, i like to try this for a kernel.. it should need just be a patched kernel (so need to recompile) and a loaded kernel or what do you think? i don't know so much about cross-compile, but i like to learn it.. if also someone else like to join t

Re: grsecurity in kernel?

2010-12-29 Thread Timo Juhani Lindfors
Vinzenz Hersche writes: > it should need just be a patched > kernel (so need to recompile) and a loaded kernel or what do you think? > > ...a loaded module, of course.. sry, typo.. :) I don't think grsec can be a separate module. ___ Openmoko communi

Re: grsecurity in kernel? (PaX: The Guaranteed End of Arbitrary Code Execution)

2010-12-29 Thread Glenn
At 23:38 +0100 29/12/10, Vinzenz Hersche wrote: Glenn, i like to try this for a kernel.. it should need just be a patched kernel (so need to recompile) and a loaded kernel or what do you think? i don't know so much about cross-compile, but i like to learn it.. if also someone else like to join t

Re: grsecurity in kernel?

2010-12-29 Thread Gennady Kupava
Hi, Vinzenz Just get kernel matching your distro, add your favorite patch and rebuild. You may use almost any armel toolchain. In fact only sources used in particular distro are different, but you may find it on site of your favorite distro. You may join irc on freenode, #openmoko channel if you

Re: grsecurity in kernel?

2010-12-29 Thread Gennady Kupava
В Срд, 29/12/2010 в 23:28 +0100, Glenn пишет: > At 0:06 +0200 30/12/10, Timo Juhani Lindfors wrote: > >Glenn writes: > >> Maybe it might be a good idea to embed grsecurity in the kernel - for > >> two reasons: > > > >I think the main goal should be to upstream our changes, not add new > >changes

Re: grsecurity in kernel?

2010-12-29 Thread Timo Juhani Lindfors
Glenn writes: >>What has grsecurity to do with debugging? > > On there home page they write: > > # Prevention of arbitrary code execution, regardless of the technique > used (stack smashing, heap corruption, etc) > # Prevention of arbitrary code execution in the kernel > # Randomization of the sta

Re: grsecurity in kernel?

2010-12-29 Thread Glenn
At 0:06 +0200 30/12/10, Timo Juhani Lindfors wrote: Glenn writes: Maybe it might be a good idea to embed grsecurity in the kernel - for two reasons: I think the main goal should be to upstream our changes, not add new changes that are not upstream. * Debug programs and drivers (faster de

Re: grsecurity in kernel?

2010-12-29 Thread Timo Juhani Lindfors
Glenn writes: > Maybe it might be a good idea to embed grsecurity in the kernel - for > two reasons: I think the main goal should be to upstream our changes, not add new changes that are not upstream. > * Debug programs and drivers (faster debugging?) What has grsecurity to do with debugging?

grsecurity in kernel?

2010-12-29 Thread Glenn
Maybe it might be a good idea to embed grsecurity in the kernel - for two reasons: * Debug programs and drivers (faster debugging?) * Heighten security ? Have no idea how the performance impact might be. http://grsecurity.net/ Quote: "... [02/10] Official grsecurity/PaX support on ARM [01/25