Re: Efficient way to keep track of security updates

it did help with the proftpd exploit http://webservsec.blogspot.co.at/2011/01/grsecurity-vs-proftpd-exploit.html but i haven't tried it with kernel exploits the video isn't online anymore but the screenshot should speak for itself 2015-01-30 7:40 GMT+01:00 Marco Galicia : > It would be interest

Re: Efficient way to keep track of security updates

It would be interesting if someone does the experiment of testing in an upathced Debian system with grsecurity kernel running. To my understanding PAX and Grsecurity might mitigate this problem, and of course future problems like this. 2015-01-30 0:30 GMT-06:00 Paul Wise : > On Fri, 2015-01-30 at

Re: Efficient way to keep track of security updates

On Fri, 2015-01-30 at 00:22 -0600, Marco Galicia wrote: > Does using something like the Grsecurity kernel helps prevent these > type of vulnerabilities? grsec can mitigate weaknesses in other software but it does not prevent those vulnerabilities from existing, it can just change the effects of b

Re: Efficient way to keep track of security updates

Hi, i have been reading a little more on the libc vulnerability now called ghost. I have a question: Does using something like the Grsecurity kernel helps prevent these type of vulnerabilities? In Ghost case, a Grsecurity kernel would help? Stephen: doesn't apticron does the same job as your scr