[grsec] Grsec + slabinfo

[Carlos Carvalho]

Brad Spengler (spender at grsecurity.net) wrote on 29 May 2010 18:33:
 >> While you're at it, I've noticed that the SysRq keys
 >> (CONFIG_MAGIC_SYSRQ) also don't work. Would it be possible to put them
 >> back? They're no security risk since they must be used at the console;
 >> I don't know if the implementation opens vulnerabilities though.
 >
 >There should be only three of the sysrq keys that don't work when 
 >certain grsec options are enabled.  It is by design, as we do care about 
 >attackers physically at consoles.  You're free to comment out the 
 >changes in drivers/char/keyboard.c if our threat model doesn't match 
 >yours.

If I understand it only keys showing restricted info are blocked,
which is fine. I'm talking about alt-sysrq-[ub], for emergency
remounts read-only and reboots. These don't work with grsec.