Date:  Fri, 08 Dec 2006 00:38:51 +0200
From:  Arthur Sherman <arturs (at mark) netvision.net.il>
Subject:  [coba-e:08132] Re: grsecurity
To:  coba-e (at mark) bluequartz.org
Message-Id:  <02f701c71a50$7829ce20$6502a8c0@lapxp>
In-Reply-To:  <0a2101c71a3e$73e99190$6700a8c0@OfficeKen>
X-Mail-Count: 08132

> >> > Hi all,
> >> >
> >> > Just wonder if there is anyone using this on CBQ:
> >> > http://www.grsecurity.net/
> >> >
> >> > If yes, what are downsides? Is there any
> >> howto/recommendations/anything
> >> > useful to know?
> >> >
> >> >
> >> > Thanks!
> >> >
> >> >
> >> > Best,
> >> >
> >> > --
> >> > Arthur Sherman
> >> >
> >>
> >>
> >> If you  use one of those grsecurity.net  kernels and you have
> >> ASP installed,
> >> then the ASP will not work.
> >
> > Oh, this one is important.
> >
> > Ken, could you pls direct me to an appropriate reading?
> > Or is it somewhere on their site?
> >
> > Thanks!
> >
> >
> > Best,
> >
> > --
> > Arthur Sherman
> >
> > +972-52-4878851
> > CPTeam
> 
> 
> Arthur, there is no place that talks about it. Just that we 
> tried it, and 
> the ASP did not work for us with that kernel.
> As I recall, the GRSec  kernel randomizes memory locations more which 
> prevents many exploits. I assume that the ASP does not like that 
> randomization.
> 
> ----
> Ken Marcus
> Precision Web Hosting, Inc.
> http://www.precisionweb.net
> 


I see.

Thanks, Ken.


Best,

--
Arthur Sherman

+972-52-4878851
CPTeam