User Tools

Site Tools


linux_hardened

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
linux_hardened [2018/02/07 17:38]
val [Hardened Gentoo]
linux_hardened [2018/02/08 13:05]
val [Hardened Debian/Ubuntu]
Line 4: Line 4:
  
 ===== Hardened Gentoo ===== ===== Hardened Gentoo =====
 +
 +  * Видео урок: [[https://​youtu.be/​-6aM7q27NbM|Использование GRSecurity в Gentoo]]
  
   * [[https://​wiki.gentoo.org/​wiki/​Hardened/​Introduction_to_Hardened_Gentoo|Introduction to Hardened Gentoo]]   * [[https://​wiki.gentoo.org/​wiki/​Hardened/​Introduction_to_Hardened_Gentoo|Introduction to Hardened Gentoo]]
   * [[https://​wiki.gentoo.org/​wiki/​Hardened_Gentoo/​ru|Hardened Gentoo]]   * [[https://​wiki.gentoo.org/​wiki/​Hardened_Gentoo/​ru|Hardened Gentoo]]
-  * [[Управление ядром и модулями в Linux#​Сборка ядра в Gentoo]] +
-  * Видео урок: [[https://​youtu.be/​-6aM7q27NbM|Использование GRSecurity в Gentoo]]+
  
 <​code>​ <​code>​
-HW: 2048GB 2CPU, HDD 16Gb (удалил /usr/src/)+HW: 2048GB 2CPU, HDD 16Gb
  
 gentoo ~ # rm /usr/src gentoo ~ # rm /usr/src
Line 29: Line 30:
 user    41m13.918s user    41m13.918s
 sys     ​12m43.084s sys     ​12m43.084s
 +</​code>​
  
-gentoo ~ emerge --ask hardened-sources +  * [[Управление ядром и модулями в Linux#Сборка ядра в Gentoo]] 
-gentoo ~ # echo "=sys-kernel/​hardened-sources-4.8.17-r2"​ >> /​etc/​portage/​package.unmask +===== Hardened Debian =====
-gentoo ~ # emerge --ask hardened-sources+
  
-# make defconfig 
- 
-... 
- 
-gentoo /​usr/​src/​linux # time make -j3 
- 
-real    20m6.287s 
-user    34m28.865s 
-sys     ​4m4.605s 
- 
-... 
- 
-... 
- 
-grub-mkconfig -o /​boot/​grub/​grub.cfg 
-</​code>​ 
-===== Hardened Debian/​Ubuntu ===== 
- 
-  * [[http://​compilefailure.blogspot.ru/​2011/​02/​grsecurity-patched-ubuntu-server-lts.html|grsecurity patched kernel for Ubuntu server (LTS)]] 
   * [[https://​wiki.debian.org/​Hardening|Hardening Debian]]   * [[https://​wiki.debian.org/​Hardening|Hardening Debian]]
  
-<​code>​ 
-# cd /usr/src 
- 
-# wget http://​grsecurity.net/​stable/​grsecurity-X.X.X-X.X.X-201XXXXXXXX.patch 
- 
-# cd linux-* 
- 
-# patch -p1 < ../​grsecurity-X.X.X-X.X.X-201XXXXXXXX.patch 
- 
-# apt-get install gcc-4.6-plugin-dev 
-</​code>​ 
linux_hardened.txt · Last modified: 2020/06/23 21:51 by val