[grsec] 2.6.13.2-grsec 20050930: High frequency of apps dying

pageexec at freemail.hu pageexec at freemail.hu
Wed Oct 5 07:12:50 EDT 2005


On 5 Oct 2005 at 9:37, bc wrote:
> I don't intent to be rude or start a flame, but just one quick thought:
> Why IN THE HELL ON EARTH would someone run grsec kernel on desktop
> machine or tighten application like mozilla, gaim or tuxracer?!

anything that accepts/parses network input is a potential entry
vector for an attacker, so it makes a lot of sense to run those
desktop apps as well under a hardened environment (fwiw, i do it
myself and yet i don't feel like in hell ;-). and as others said
already, processes that begin to crash under grsec deserve a look
as you never know if it's a bug in grsec (or PaX) itself or the
app in question, in either case, someone somewhere made a mistake
and it's in everyone's interest to find and fix it.



More information about the grsecurity mailing list