Re: Paxtest results with default Grsec2 aren't impressive

2011-09-13 Thread Yves-Alexis Perez
On mar., 2011-09-13 at 22:47 +0200, Kees de Jong wrote: > I've been running my Debian machines with Grsec2 (package: > "linux-patch-grsecurity2") for a long time. > I thought that would keep me rather save, but I've ran Paxtest today > (which is in the Debian repository only available for i386...)

Re: Paxtest results with default Grsec2 aren't impressive

2011-09-13 Thread Yves-Alexis Perez
On mar., 2011-09-13 at 19:29 -0400, Robert Tomsick wrote: > I'm not familiar > with what defaults/settings the Debian package defaults to, but if it > doesn't pre-select all of the protections available, I suspect that's > why. > > If you mean the linux-patch-grsecurity2 package, it's just a patc

Re: Paxtest results with default Grsec2 aren't impressive

2011-09-13 Thread Robert Tomsick
On Tue, 2011-09-13 at 22:47 +0200, Kees de Jong wrote: > I've been running my Debian machines with Grsec2 (package: > "linux-patch-grsecurity2") for a long time. > I thought that would keep me rather save, but I've ran Paxtest today > (which is in the Debian repository only available for i386...) >

Re: Paxtest results with default Grsec2 aren't impressive

2011-09-13 Thread Yves-Alexis Perez
On mar., 2011-09-13 at 22:47 +0200, Kees de Jong wrote: > I've been running my Debian machines with Grsec2 (package: > "linux-patch-grsecurity2") for a long time. > I thought that would keep me rather save, but I've ran Paxtest today > (which is in the Debian repository only available for i386...)

Paxtest results with default Grsec2 aren't impressive

2011-09-13 Thread Kees de Jong
I've been running my Debian machines with Grsec2 (package: "linux-patch-grsecurity2") for a long time. I thought that would keep me rather save, but I've ran Paxtest today (which is in the Debian repository only available for i386...) and I wonder now if it could be better. Follow these steps if