Index: [Article Count Order] [Thread]

Date:  Thu, 7 Dec 2006 12:29:52 -0800
From:  "Ken Marcus - Precision Web Hosting, Inc." <kenmarcus (at mark) precisionweb.net>
Subject:  [coba-e:08129] Re: grsecurity
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <0a2101c71a3e$73e99190$6700a8c0@OfficeKen>
References:  <02db01c71a34$30383500$6502a8c0@lapxp>
X-Mail-Count: 08129


----- Original Message ----- 
From: "Arthur Sherman" <arturs (at mark) netvision.net.il>
To: <coba-e (at mark) bluequartz.org>
Sent: Thursday, December 07, 2006 11:16 AM
Subject: [coba-e:08127] Re: grsecurity


>> > Hi all,
>> >
>> > Just wonder if there is anyone using this on CBQ:
>> > http://www.grsecurity.net/
>> >
>> > If yes, what are downsides? Is there any
>> howto/recommendations/anything
>> > useful to know?
>> >
>> >
>> > Thanks!
>> >
>> >
>> > Best,
>> >
>> > --
>> > Arthur Sherman
>> >
>>
>>
>> If you  use one of those grsecurity.net  kernels and you have
>> ASP installed,
>> then the ASP will not work.
>
> Oh, this one is important.
>
> Ken, could you pls direct me to an appropriate reading?
> Or is it somewhere on their site?
>
> Thanks!
>
>
> Best,
>
> --
> Arthur Sherman
>
> +972-52-4878851
> CPTeam


Arthur, there is no place that talks about it. Just that we tried it, and 
the ASP did not work for us with that kernel.
As I recall, the GRSec  kernel randomizes memory locations more which 
prevents many exploits. I assume that the ASP does not like that 
randomization.

----
Ken Marcus
Precision Web Hosting, Inc.
http://www.precisionweb.net