All Projects → nning → linux-grsec

nning / linux-grsec

Licence: other
Arch Linux package for the Linux Kernel and modules with grsecurity/PaX patches.

Programming Languages

shell
77523 projects
ruby
36898 projects - #4 most used programming language

Projects that are alternatives of or similar to linux-grsec

grsecurity-reproducible-build
Some scripts to create a reproducible build for grsecurity
Stars: ✭ 28 (+47.37%)
Mutual labels:  linux-kernel, pax, grsecurity
arch-efiboot
Boot EFISTUB linux kernels on UEFI systems not supporting kernel command line
Stars: ✭ 35 (+84.21%)
Mutual labels:  linux-kernel, arch-linux
apple-bce-arch
Arch Linux package for the Apple BCE driver required for T2-equipped devices.
Stars: ✭ 24 (+26.32%)
Mutual labels:  linux-kernel, arch-linux
virtblkiosim
Virtual Linux block device driver for simulating and performing I/O.
Stars: ✭ 30 (+57.89%)
Mutual labels:  linux-kernel, arch-linux
dotfiles
Dotfiles generator that allows quick configuration of different window managers in multiple OSs
Stars: ✭ 36 (+89.47%)
Mutual labels:  arch-linux
kali-whoami
Whoami provides enhanced privacy, anonymity for Debian and Arch based linux distributions
Stars: ✭ 1,424 (+7394.74%)
Mutual labels:  arch-linux
arch-privoxyvpn
Docker build script for Arch Linux base with Privoxy and OpenVPN
Stars: ✭ 55 (+189.47%)
Mutual labels:  arch-linux
TOSView
Draw the traces of OS(Linux, xv6, ...) kernel functions in a graph and link graph nodes to the source codes
Stars: ✭ 29 (+52.63%)
Mutual labels:  linux-kernel
TermuxPRoot
SetupTermuxPRoot.sh 📲 shall install Linux distributions in Termux on Android and Chrome. This setup script will attempt to set Linux distributions up in your Termux environment.
Stars: ✭ 59 (+210.53%)
Mutual labels:  arch-linux
Donya
Donya is an Operating system. Yet Another Linux distro built using a package management system.
Stars: ✭ 55 (+189.47%)
Mutual labels:  linux-kernel
Arch
These are easy, in-depth instructions on how to install Arch Linux.
Stars: ✭ 16 (-15.79%)
Mutual labels:  arch-linux
.config
Rafi's workstations (Archlinux, osx) ~/.config.
Stars: ✭ 71 (+273.68%)
Mutual labels:  arch-linux
DrawBridge
Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)
Stars: ✭ 81 (+326.32%)
Mutual labels:  linux-kernel
create-dotnet-devcert
A simple script that creates and trusts a self-signed development certificate for dotnet on Linux distributions.
Stars: ✭ 149 (+684.21%)
Mutual labels:  arch-linux
AwsTerm
A collection of awesome terminal utilities
Stars: ✭ 37 (+94.74%)
Mutual labels:  arch-linux
ipftrace
[Deplicated] Now we have more sophisticated (and compact) implementation in ipftrace2 repository. Please check it as well.
Stars: ✭ 60 (+215.79%)
Mutual labels:  linux-kernel
archbox
Easy to use Arch Linux chroot environment with some functionalities to integrate it with your existing Linux installation.
Stars: ✭ 113 (+494.74%)
Mutual labels:  arch-linux
termux-arch
You can use setupTermuxArch.sh 📲 to install Arch Linux in Termux on Android and Chrome. This setup script will attempt to set Arch Linux up in your Termux environment.
Stars: ✭ 25 (+31.58%)
Mutual labels:  arch-linux
A-Personal-Arch-Installation-Guide
A Personal Arch Installation Guide In Case of Amnesia
Stars: ✭ 58 (+205.26%)
Mutual labels:  arch-linux
Arch-Deployer
A script to bulk download an Arch Linux package with all its dependencies to be converted in AppImage.
Stars: ✭ 48 (+152.63%)
Mutual labels:  arch-linux
grsecurity logo

linux-grsec

Arch Linux package for the Linux Kernel and modules with grsecurity/PaX patches.

Kernel configuration

Configure (with menuconfig) and exit afterwards:

MENUCONFIG=1 makepkg

The configuration will be in src/linux-3.*/.config. In the PKGBUILDs build function (line 91 ff.), the configuration interface is changeable.

To configure and build the kernel afterwards:

MENUCONFIG=2 makepkg

grsecurity option configuration

Many options are configurable by sysctl in /etc/sysctl.d/05-grsecurity.conf. After kernel.grsecurity.grsec_lock is activated, there are no changes possible anymore.

If you do not use KMS graphics, you have to disable kernel.grsecurity.disable_priv_io.

There are six groups, which control grsecurity functions:

  • tpe
  • audit
  • socket-deny-all
  • socket-deny-client
  • socket-deny-server
  • proc-trusted
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].