On Fri, Sep 20, 2013 at 11:20:53AM -0700, Grant wrote: > > How about hardened? Does ZFS have any problems interacting with > > grsecurity or a hardened profile? > > Has anyone tried hardened and ZFS together? >
Hi, I did - I had some problems, but I'm not sure if they were caused by the combination of ZFS and hardened. There were some issues updating kernel and ZFS (most likely due to ZFS on root and me using ~arch hardened-sources and the live ebuild for zfs). There are some hardened options that are known to be not working (constify was one of them but that should be patched now). I think another one was HIDESYM. There is a (more or less regularly updated blogpost by prometheanfire (installation guide zfs+hardened+luks [1]). So you could ask him or ryao (he seems to support hardened+zfs at least to a certain degree). WKR Hinnerk [1] https://mthode.org/posts/2013/Sep/gentoo-hardened-zfs-rootfs-with-dm-cryptluks-062/
signature.asc
Description: Digital signature
