[grsec] Grsec + slabinfo

Brad Spengler spender at grsecurity.net
Sat May 29 18:33:27 EDT 2010


> While you're at it, I've noticed that the SysRq keys
> (CONFIG_MAGIC_SYSRQ) also don't work. Would it be possible to put them
> back? They're no security risk since they must be used at the console;
> I don't know if the implementation opens vulnerabilities though.

There should be only three of the sysrq keys that don't work when 
certain grsec options are enabled.  It is by design, as we do care about 
attackers physically at consoles.  You're free to comment out the 
changes in drivers/char/keyboard.c if our threat model doesn't match 
yours.

-Brad
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL: <http://grsecurity.net/pipermail/grsecurity/attachments/20100529/f3c66ada/attachment.pgp>


More information about the grsecurity mailing list