• Grsecurity

• Introduction to Hardened Gentoo
• Hardened Gentoo
• Сборка ядра в Gentoo
• Видео урок: Использование GRSecurity в Gentoo

HW: 2048GB 2CPU, HDD 16Gb (удалил /usr/src/)

gentoo ~ # rm /usr/src

gentoo ~ # time emerge --oneshot gcc
real    83m7.695s
user    127m57.571s
sys     13m31.611s

gentoo ~ # time emerge --oneshot binutils virtual/libc
real    8m0.371s
user    10m8.256s
sys     1m33.139s

gentoo ~ # time emerge --emptytree --verbose @world
real    39m26.852s
user    41m13.918s
sys     12m43.084s

gentoo ~ # emerge --ask hardened-sources
gentoo ~ # echo "=sys-kernel/hardened-sources-4.8.17-r2" >> /etc/portage/package.unmask
gentoo ~ # emerge --ask hardened-sources

# make defconfig

...

gentoo /usr/src/linux # time make -j3

real    20m6.287s
user    34m28.865s
sys     4m4.605s

...

...

grub-mkconfig -o /boot/grub/grub.cfg

• grsecurity patched kernel for Ubuntu server (LTS)
• Hardening Debian

# cd /usr/src

# wget http://grsecurity.net/stable/grsecurity-X.X.X-X.X.X-201XXXXXXXX.patch

# cd linux-*

# patch -p1 < ../grsecurity-X.X.X-X.X.X-201XXXXXXXX.patch

# apt-get install gcc-4.6-plugin-dev