grsecurity forums

when release grsecurity patch for this kernel. On this kernel are any bugs

http://www.grsecurity.net/~spender/grse ... 4.28.patch

hf, official release doesn't take too long usually

does have 2.4.28 have any security related fixes?
is it safe to stick with 2.4.27-grsec?
s.

There is at least one exploit in 2.4.27
http://www.isec.pl/vulnerabilities/isec ... mt_elf.txt

I believe there is also a problem in smbfs

Sleight of Mind wrote:http://www.grsecurity.net/~spender/grsecurity-2.0.2-2.4.28.patch

hf, official release doesn't take too long usually

Don't turn on chdir logging with that patch, things will segfault/oops due to a bug in the log message. Already reported the bug.

It's this line in include/linux/grmsg.h:

Code: Select all

#define GR_CHDIR_AUDIT_MSG "%s chdir to %.980s by "

It should be:

Code: Select all

#define GR_CHDIR_AUDIT_MSG "chdir to %.980s by "

Fixed now.