grsecurity kernel help/questions

CBG

• April 17, 2014 15:13

Hi,. I have a unmanaged cPanel/WHM VPS running vmware and CentOS 6.5. I installed the CentOS Kernel using yum, so I could get ConfigServer Firewall working. I would like to setup a grsecurity kernel and would like some advice wget http://www.kernel.org/pub/linux/kernel/v3.x/linux-3.2.57.tar.gz wget http://grsecurity.net/stable/grsecurity-3.0-3.2.57-201404131252.patch tar -xf linux-3.2.57.tar cd linux-3.2.57 patch -p1 < ../grsecurity-2.9.1-3.2.57-201404131252.patch make menuconfig 1. Is the above correct 2. Can I download the 2 files anywhere on the VPS? 3. Once I have patched and configure it, do I move it to the /boot/ folder? 4. Will it be just the one file I need to copy over to the boot folder? 5. Do I then config the grub.conf file like the below default=0 timeout=5 title linux centos6-cpanel11_64 kernel /boot/kernel_filename_here root=/dev/sda1 ro root (hd0,0)
If you have any advice or help, that would be great.

• 

  cPanelMichael

  • April 17, 2014 20:19

  Hello :) The Grsecurity documentation might be useful: [url=http://en.wikibooks.org/wiki/Grsecurity/Configuring_and_Installing_grsecurity]Grsecurity/Configuring and Installing grsecurity - Wikibooks, open books for an open world Thank you.

  0
• 

  CBG

  • April 17, 2014 20:57

  Hi, Thanks for the reply, I had read some of that and I also just found a guide on the internet from 2010 Link: [url=http://blog.securitytargets.com/2010/10/hardening-centos-kernel-with-grsecurity.html]SecurityTargets Blog: Hardening CentOS kernel with grsecurity Both have helped me a lot. Thanks

  0

Please sign in to leave a comment.