Language Selection

English French German Italian Portuguese Spanish

Linux Firewalls, 3rd Edition: Greater Security with GrSecurity

Filed under
HowTos

GrSecurity, formally known as Greater Security, is a kernel patch and userspace program for enhancing the security of a Linux system. GrSecurity, also referred to as Grsec, closes some avenues for attack and makes others much more difficult. Grsec implements a sophisticated Access Control List (ACL) for objects in Linux. The ACL can be used to provide much more granular control over files and other resources. For example, using a Grsec ACL, you can control what files will be shown as the result of a find command or which processes are included in process accounting logs.

Grsec also enables a system called PaX to restrict the capability of processes to alter memory space. This aspect alone renders many types of attacks involving overflows completely ineffective. Grsec also provides other protections such as stack randomization to make attacking the computer a more difficult task.

Full Story.

More in Tux Machines

Ubuntu Developers Working on Feature Parity for Unity 8 - Video

A large part of the work that's been done for Unity 8 is focused on making it looks and feel like Unity 7. Canonical is not trying to reinvent Unity; it's rewriting it for the future. Read more

GPS Navigation for Ubuntu Touch Gets More Features

GPS Navigation is a free app for Ubuntu Touch, and it's been getting constant updates for the past few weeks. It's still in the development stages, but it looks like it's coming together just nicely. Read more

Next Tizen Smartphone, Samsung Z3 SM-Z300H, Imported to india for Testing

The Samsung Z3 SM-Z300H is going to be the second Tizen based Smartphone to begin testing in India and hopefully final release. We Initially reported on the existence of the Z3 with Sammobile confirming it will be the next Tizen mobile phone to be released. Now our friends at Best Tizen Apps have noticed a shipment of a few “SM-Z300H” Smartphones making the journey from Korea to Bangalore India, reported for testing purposes. The phone is shipped as costing $205 USD per unit around 13,039 INR, but this is more of a speculated price and does not reflect final retail pricing. Read more

It's Now Easier Managing Systemd In KDE

For those running KDE on a systemd-based Linux system, the KDE Control Module for controlling this init system and its options has been updated. Read more