From: Sandino Araico Sánchez (sandino_at_sandino.net)
Date: Thu 10 Jun 2004 - 08:14:58 BST
Herbert Poetzl wrote:
>>The current vserver+grsecurity is working perfectly well for me on my
>>systems. I've been using Sandino Araico Sanchez's vserver+grsec
>>patch and they've been stable as a rock.
>as far as I know, a 'working' vserver/grsec combo
>was done several times, but not seriously tested,
>and as far as I heard, there where some issues ...
There are some issues whth usage of ACLs and dropping CAP_SYSADMIN
Unfortunately I haven't had as much spare time as I need to dig into
that issues and it seems quite complex.
>nevertheless, if grsec is going to perish, for
>whatever reason, it might be interesting to absorb
>those parts useful for linux-vserver into a security
>branch of linux-vserver ...
>(would be 2.6 branch of course)
>>>From: Sandino Araico Sánchez <sandino_at_sandino.net>
>>>I've just uploaded the patch Vserver 1.27 + GR Security 1.9.14 against
>>Luke Computer Science System Administrator
>>Security Administrator,College of Engineering
>>Montana State University-Bozeman,Montana
>>Vserver mailing list
>Vserver mailing list
-- Sandino Araico Sánchez -- ... there's no spoon ...
_______________________________________________ Vserver mailing list Vserver_at_list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver