lean kernel .config for virtualized guests

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

lean kernel .config for virtualized guests

Postby ivan » Wed Feb 04, 2015 7:38 am

Hi

Configuring grsecurity was a breeze, but going recursively through the bazillion options the kernel provides was not. So in case anyone is interested I've setup a github repo with rather lean kernel configs for KVM and XEN (the XEN one works on a Linode). Hopefully it'll save someone else's time.
Those kernels have been in production for some months without any problem but as always no guarantee provided.

Suggestions/forks/pull requests and configs for other setups are of course welcome.

https://github.com/taradiddles/grsec-kernels

[EDIT] - I've also uploaded a script I've written to automate building, it automatically fetches the latest kernel and grsecurity patches, extracst/patches the kernel, and optionaly builds a kernel with a supplied .config file

Ivan
ivan
 
Posts: 3
Joined: Mon Jan 12, 2015 5:17 am

Return to grsecurity support