Grsecurity

PaX /Print_version grsecurity is a set of patches for the Linux kernel with an emphasis on enhancing security. It allows the system administrator to, among other things, define a least privilege policy for the system, in which every process and user have only the lowest privileges needed to function. This book is intended as a comprehensive up-to-date user guide about setting up and administrating a grsecurity-enabled system. Table of Contents Introduction Overview 100% July 02, 2010 Terminology 100% July 28, 2013 How to Contribute 100% July 28, 2013 Installation Obtaining Required Components 100% Jul 24, 2009 Downloading grsecurity Downloading gradm Downloading the Linux Kernel Verifying the Downloads Configuring and Installing grsecurity 100% Jan 02, 2010 Patching Your Kernel with grsecurity Configuring the Kernel Compiling and Installing the Kernel Administration The Administration Utility (gradm) 75% Jul 23, 2009 Installation Usage Learning Mode Additional Utilities 75% Jul 23, 2009 Controlling PaX Flags (paxctl) Displaying Program Capabilities (pspax) Managing the Executable Stack of Binaries (execstack) Runtime Configuration Through sysctl 100% Jul 23, 2009 Troubleshooting Policy Configuration The RBAC System in grsecurity 75% Jan 02, 2010 What Is an RBAC System? Limitations of any Access Control System 25% Sept 18, 2009 Policy Structure 100% Jan 02, 2010 Rules for Policies 25% Sept 18, 2009 Roles 75% Sept 14, 2009 Subjects 50% Nov 10, 2013 Domains 100% Jan 02, 2010 Capability Restrictions 75% Sept 13, 2009 Resource Restrictions 75% Jan 02, 2010 Socket Policies 75% Sept 13, 2009 PaX Flags 100% Sept 13, 2009 Flow of Matches 75% Sept 13, 2009 Policy Recommendations 25% Sept 13, 2009 Sample Policies 50% Sept 13, 2009 Application-specific Settings Show full list / Add Application ATI Catalyst (fglrx) cPanel jailshell Firefox/Iceweasel Google Chrome Grub GUFW/UFW firewalls or Update Manager IOQuake3 ISC DHCP Server Java Nagios Node.js Openoffice.org PHP and other applications that set their own resource limits X.org Reporting Bugs Reporting bugs 75% Sept 27, 2009 Contacts Requirements Appendix Lists Grsecurity and PaX Configuration Options 100% Jul 23, 2009 Tables Role Modes 100% Sept 11, 2009 Role Attributes 100% Sept 11, 2009 Subject Modes 100% Sept 12, 2009 Subject Attributes 100% Sept 12, 2009 Object Modes 100% Sept 13, 2009 PaX Flags 100% Jul 24, 2009 Capability Names and Descriptions 100% Jul 24, 2009 System Resources 100% Sept 11, 2009 Sysctl Options 100% Jul 28, 2013 Credits and Permissions See Credits and Permissions for details about copyright and references of this document. External Links Official grsecurity website Official website of the PaX project Linux Information security G 75% __NOTOC__