This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
linux_hardened [2017/12/04 13:41] val [Hardened Gentoo] |
linux_hardened [2020/06/23 21:51] val [Hardened Gentoo] |
||
---|---|---|---|
Line 5: | Line 5: | ||
===== Hardened Gentoo ===== | ===== Hardened Gentoo ===== | ||
- | * [[https://wiki.gentoo.org/wiki/Hardened/Introduction_to_Hardened_Gentoo|Introduction to Hardened Gentoo]] | ||
- | * [[https://wiki.gentoo.org/wiki/Hardened_Gentoo/ru|Hardened Gentoo]] | ||
- | * [[Управление ядром и модулями в Linux#Сборка ядра в Gentoo]] | ||
* Видео урок: [[https://youtu.be/-6aM7q27NbM|Использование GRSecurity в Gentoo]] | * Видео урок: [[https://youtu.be/-6aM7q27NbM|Использование GRSecurity в Gentoo]] | ||
- | ===== Hardened Debian/Ubuntu ===== | + | * [[https://wiki.gentoo.org/wiki/Hardened/Introduction_to_Hardened_Gentoo|Introduction to Hardened Gentoo]] |
+ | * [[https://wiki.gentoo.org/wiki/Hardened_Gentoo/ru|Hardened Gentoo]] (ru) | ||
- | * [[http://compilefailure.blogspot.ru/2011/02/grsecurity-patched-ubuntu-server-lts.html|grsecurity patched kernel for Ubuntu server (LTS)]] | ||
- | * [[https://wiki.debian.org/Hardening|Hardening Debian]] | ||
<code> | <code> | ||
- | # cd /usr/src | + | gentoo ~ # eselect profile list |
+ | ... | ||
+ | [27] default/linux/amd64/17.1/no-multilib/hardened (stable | ||
+ | ... | ||
+ | gentoo ~ # eselect profile set 27 | ||
- | # wget http://grsecurity.net/stable/grsecurity-X.X.X-X.X.X-201XXXXXXXX.patch | + | gentoo ~ # source /etc/profile |
- | # cd linux-* | + | gentoo ~ # time emerge --oneshot gcc |
+ | real 83m7.695s | ||
+ | user 127m57.571s | ||
+ | sys 13m31.611s | ||
- | # patch -p1 < ../grsecurity-X.X.X-X.X.X-201XXXXXXXX.patch | + | real 615m28.005s |
+ | user 580m34.331s | ||
+ | sys 31m48.699s | ||
- | # apt-get install gcc-4.6-plugin-dev | + | gentoo ~ # time emerge --oneshot binutils virtual/libc |
+ | real 8m0.371s | ||
+ | user 10m8.256s | ||
+ | sys 1m33.139s | ||
+ | |||
+ | real 35m30.862s | ||
+ | user 30m16.610s | ||
+ | sys 4m2.086s | ||
+ | |||
+ | gentoo ~ # time emerge --emptytree --verbose @world | ||
+ | real 39m26.852s | ||
+ | user 41m13.918s | ||
+ | sys 12m43.084s | ||
</code> | </code> | ||
+ | |||
+ | * [[Управление ядром и модулями в Linux#Сборка ядра в Gentoo]] | ||
+ | ===== Hardened Debian ===== | ||
+ | |||
+ | * [[https://wiki.debian.org/Hardening|Hardening Debian]] | ||
+ |