[grsec] grsec patch for 2.6.15?

pageexec at freemail.hu pageexec at freemail.hu
Tue Jan 10 15:41:28 EST 2006


> i don't think i'm immune (whee, what a nice strawman!).
> all pax (and grsec, etc) does is make such exploits harder. and it did at 
> least prevent all the exploits i tried. this doesn't mean exploits in the 
> future are impossible,

if you seriously believe that than maybe it wasn't a strawman
after all. if such exploits are possible in the future then
they have always been (well, let's hope PaX doesn't get worse
over time ;-), although apparently you do believe that what
you can't get your hands on does not exist. (false sense of)
security by obscurity, in a twisted sense.

> but it's beginning to look like i will have to go to openbsd to get 
> modern hardware support and pax(-like) features,

feel free, it's a free (will) world, or so i've been told. if
you think that such 'threats' will change anyone's mind then
you'll be in for a surprise in their camp as well, but i guess
you'll learn that the hard way.

> since it pax won't support 2.6.

except PaX and grsecurity do support 2.6, just not the latest and
greatest version of it, which is what this thread was about. whee,
what a nice strawman!



More information about the grsecurity mailing list