This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
linux_hardened [2017/11/29 07:51] val [Hardened Debian/Ubuntu] |
linux_hardened [2018/02/08 13:05] val [Hardened Debian/Ubuntu] |
||
---|---|---|---|
Line 4: | Line 4: | ||
===== Hardened Gentoo ===== | ===== Hardened Gentoo ===== | ||
+ | |||
+ | * Видео урок: [[https://youtu.be/-6aM7q27NbM|Использование GRSecurity в Gentoo]] | ||
* [[https://wiki.gentoo.org/wiki/Hardened/Introduction_to_Hardened_Gentoo|Introduction to Hardened Gentoo]] | * [[https://wiki.gentoo.org/wiki/Hardened/Introduction_to_Hardened_Gentoo|Introduction to Hardened Gentoo]] | ||
* [[https://wiki.gentoo.org/wiki/Hardened_Gentoo/ru|Hardened Gentoo]] | * [[https://wiki.gentoo.org/wiki/Hardened_Gentoo/ru|Hardened Gentoo]] | ||
- | ===== Hardened Debian/Ubuntu ===== | ||
- | |||
- | * [[http://compilefailure.blogspot.ru/2011/02/grsecurity-patched-ubuntu-server-lts.html|grsecurity patched kernel for Ubuntu server (LTS)]] | ||
- | * [[https://wiki.debian.org/Hardening|Hardening Debian]] | ||
<code> | <code> | ||
- | # cd /usr/src | + | HW: 2048GB 2CPU, HDD 16Gb |
- | # wget http://grsecurity.net/stable/grsecurity-X.X.X-X.X.X-201XXXXXXXX.patch | + | gentoo ~ # rm /usr/src |
- | # cd linux-* | + | gentoo ~ # time emerge --oneshot gcc |
+ | real 83m7.695s | ||
+ | user 127m57.571s | ||
+ | sys 13m31.611s | ||
- | # patch -p1 < ../grsecurity-X.X.X-X.X.X-201XXXXXXXX.patch | + | gentoo ~ # time emerge --oneshot binutils virtual/libc |
+ | real 8m0.371s | ||
+ | user 10m8.256s | ||
+ | sys 1m33.139s | ||
- | # apt-get install gcc-4.6-plugin-dev | + | gentoo ~ # time emerge --emptytree --verbose @world |
+ | real 39m26.852s | ||
+ | user 41m13.918s | ||
+ | sys 12m43.084s | ||
</code> | </code> | ||
+ | |||
+ | * [[Управление ядром и модулями в Linux#Сборка ядра в Gentoo]] | ||
+ | ===== Hardened Debian ===== | ||
+ | |||
+ | * [[https://wiki.debian.org/Hardening|Hardening Debian]] | ||
+ |