Re: [gentoo-hardened] vmware & grsecurity.disable_modules

2009-03-29 Thread RB
On Sun, Mar 29, 2009 at 08:43, Alex Efros wrote: > On servers I build kernel without module support. But on workstation it's > impossible to avoid using kernel modules: vmware-modules, nvidia-drivers... > > Is it have sense to patch /etc/vmware/init.d/vmware this way on hardened > systems in vmwa

[gentoo-hardened] vmware & grsecurity.disable_modules

2009-03-29 Thread Alex Efros
Hi! On servers I build kernel without module support. But on workstation it's impossible to avoid using kernel modules: vmware-modules, nvidia-drivers... I'm usually load required modules while boot and then do in /etc/sysctl.conf: kernel.grsecurity.disable_modules = 1 kernel.grsecurity.g