grsecurity
grsecurity is an innovative approach to security utilizing a multi-layered detection, prevention, and containment model. It is licensed under the GPL. Some of it’s features include: an intelligent and robust Role-Based Access Control (RBAC) system that can generate least privilege policies for your entire system with no configuration, change root (chroot) hardening, /tmp race prevention, extensive auditing, prevention of arbitrary code execution, regardless of the technique used (stack smashing, heap corruption, etc), prevention of arbitrary code execution in the kernel, randomization of the stack, library, and heap bases, kernel stack base randomization, protection against exploitable null-pointer dereference bugs in the kernel, reduction of the risk of sensitive information being leaked by arbitrary-read kernel bugs, a restriction that allows a user to only view his/her processes, security alerts and audits that contain the IP address of the person causing the alert.
Loading ...
Post a review