RE: Security Patches to the Linux Kernel

From: twm139@its.to
Date: 08/30/01 

Date: Thu, 30 Aug 2001 01:46:14 -0600 (MDT)
From: <twm139@its.to>
To: Matt Block <blockdev@blockdev.net>
Subject: RE: Security Patches to the Linux Kernel
Message-ID: <Pine.LNX.4.33.0108300117480.14042-100000@arnold.its.to>

On Thu, 30 Aug 2001, Matt Block wrote:

> I've experimented with both. There are many other options, as well.
>
> GR-Security is great, I find. I haven't updated in awhile, however.
> Messages posted to the forums at the Get Rewted website are generally
> answered promptly and helpfully. I think the guy who puts it together
> would probably really appreciate a bug report, if you can reproduce it
> or, better, offer a patch.

I did send the maintainer a list of the relevant log messages. The execv
logging realling helped in that it showed the exact commands run that
caused the error. :)

With regards to the forums, I have not been able to find any mention of
that on the getrewted.net web site, do you have a link?

> of protection. Again, I haven't much enjoyed the configuration, but it
> can add a lot of security and detection to your box.

I primarily am doing my research on a smaller network of real and virtual
Linux systems, but I can just imagine trying to manage a large network of
linux systems running various open and proprietary applications. The
management of the configuration of these systems might well get out of
control. :( Not to mention the management of the information created by
the verbose logging and intrusion messages. Take GRSecurity, add LIDS, a
file integrity checker and a NIDS and things might get out of hand fast.

Cheers,

Terrence

Relevant Pages