Re: Linux hardening
From: Pär Johansson (par.johansson_at_gmail.com)
Date: Sat, 27 Aug 2005 07:35:48 +0200 To: firstname.lastname@example.org
On 8/26/05, Eduardo Tongson <email@example.com> wrote:
> If you really want to harden linux, by all means use PaX+Grsecurity+SSP.
> PaX is better and mature than Redhat's execshield.. or OpenBSD's stackgap/w^x
> But don't take my word for it <http://pax.grsecurity.net/docs/index.html>
There's a a hardened debian-based linux distribution called Adamantix
(http://www.adamantix.org) that you might want to check out, which
includes both PaX and SSP (though not grsecurity).
But do be careful, I've locked myself out of my own system a few times
using it :)
-- Pär Johansson