[grsec] grsec for vmsplice-bug-fixed Linux 2.6?

Marc Schiffbauer marc at schiffbauer.net
Thu Feb 14 16:01:55 EST 2008


* hondza schrieb am 14.02.08 um 20:34 Uhr:
> On 2008-02-14, Marc Schiffbauer wrote:
> > But my grsec enabled kernels do not have /proc/kallsyms .. so this
> > does not work. Are there alternatives?
> 
> If you have System.map for the very kernel, the address for sys_vmsplice
> should be there.

Ah yes. Is having the System.map worldreadable a "security risc" in any 
way then?

It still won't work:

"grsec: ... denied write of /dev/kmem by /bin/dd"

-Marc

-- 
8AAC 5F46 83B4 DB70 8317  3723 296C 6CCA 35A6 4134


More information about the grsecurity mailing list