Language Selection

English French German Italian Portuguese Spanish

Enhancing kernel security with grsecurity

Filed under
HowTos

Is your server as secure as it could be? Sure, you use a firewall, mandate strong passwords, and patch regularly. You even take a proactive approach by performing security audits with tools such as nmap and Nessus. Yet you may still be vulnerable to zero-day exploits and privilege escalation attacks. If these possibilities keep you awake at night, you're not alone. The sleepless folks with the grsecurity project have developed an easy-to-use set of security enhancements to help put your fears to rest.

To say that grsecurity provides many enhancements is an understatement. There are more than 30 options to choose from after installation.

Take note that grsecurity requires the use of a vanilla kernel from www.kernel.org. The kernel source supplied by your distribution's vendor has most likely been patched beyond recognition to grsecurity. With that caveat in mind, installation is simple.

Full Story.

More in Tux Machines

today's howtos

Tizen News

Mozilla Firefox Quantum

  • Can the new Firefox Quantum regain its web browser market share?
    When Firefox was introduced in 2004, it was designed to be a lean and optimized web browser, based on the bloated code from the Mozilla Suite. Between 2004 and 2009, many considered Firefox to be the best web browser, since it was faster, more secure, offered tabbed browsing and was more customizable through extensions than Microsoft’s Internet Explorer. When Chrome was introduced in 2008, it took many of Firefox’s best ideas and improved on them. Since 2010, Chrome has eaten away at Firefox’s market share, relegating Firefox to a tiny niche of free software enthusiasts and tinkerers who like the customization of its XUL extensions. According to StatCounter, Firefox’s market share of web browsers has fallen from 31.8% in December 2009 to just 6.1% today. Firefox can take comfort in the fact that it is now virtually tied with its former arch-nemesis, Internet Explorer and its variants. All of Microsoft’s browsers only account for 6.2% of current web browsing according to StatCounter. Microsoft has largely been replaced by Google, whose web browsers now controls 56.5% of the market. Even worse, is the fact that the WebKit engine used by Google now represents over 83% of web browsing, so web sites are increasingly focusing on compatibility with just one web engine. While Google and Apple are more supportive of W3C and open standards than Microsoft was in the late 90s, the web is increasingly being monopolized by one web engine and two companies, whose business models are not always based on the best interests of users or their rights.
  • Firefox Nightly Adds CSD Option
    I’ve said it before and I’ll say it again: Firefox 57 is awesome — so awesome that I’m finally using it as my default browser again. But there is one thing it the Linux version of Firefox sorely needs: client-side decoration.

First Renesas based Raspberry Pi clone runs Linux

iWave’s “iW-RainboW-G23S” SBC runs Linux on a Renesas RZ/G1C, and offers -20 to 85°C support and expansion headers including a RPi-compatible 40-pin link. iWave’s iW-RainboW-G23S is the first board we’ve seen to tap the Renesas RZ/G1C SoC, which debuted earlier this year. It’s also the first Renesas based SBC we’ve seen that features the increasingly ubiquitous Raspberry Pi 85 x 56mm footprint, layout, and RPi-compatible 40-pin expansion connector. The board is also notable for providing -20 to 85°C temperature support. Read more Also: GameShell Is An Open Source And Linux-powered Retro Game Console That You’ll Love