grsecurity 2.1.10

Kernel

Megjelent a grsecurity patch 2.1.10-es verziója a 2.4.34 és 2.6.19.2 kernelekhez.

Bejelentés:

grsecurity 2.1.10 was released today for Linux 2.4.34 and 2.6.19.2.
Changes in this release include:

  • Fixes to PaX flag support in RBAC system
  • PaX updates for non-x86 architectures in 2.4.34 patch
  • Fix for setpgid in chroot problem reported on forums
  • Removal of randomized PIDs feature, since it provides no useful
    additional security and wastes memory with the 2.6 kernel's pid bitmap
  • Fixed /proc usage in a chroot in 2.6 patch
  • Added admin role to generated policy from full learning

The version was incremented due to required gradm changes for the PaX flags. This patch corrects the "dropped command" problem reported here on the mailing list and the forums. I've also posted an official
comment on the website regarding the alleged vulnerabilities in grsecurity/PaX.

-Brad

Letöltés:

grsecurity-2.1.10-2.4.34-200701032218.patch.gz
grsecurity-2.1.10-2.6.19.2-200701121837.patch.gz
gradm-2.1.10-200701121959.tar.gz