Re: Hardening a Kernel post hardened-sources

On Wed, Mar 28, 2018 at 12:40 PM, Alex Efros <[email protected]> wrote:
> Hi!
>
> On Wed, Mar 28, 2018 at 06:06:00PM +0100, Robert Sharp wrote:
>> Does anyone know of a good, post GRSecurity guide to reasonable security
>> for the kernel? In the absence of anything else I will have to go back
>> to the KSPP list and start removing stuff until I can get a stable kernel.
>
> I'm using https://github.com/minipli/linux-unofficial_grsec, but it lacks
> Spectre and Meltdown mitigation at the moment (see issues). Still, I
> believe it's the best we can have now (better is probably paid GrSec, but
> AFAIK it's impossible or too costly to buy it for home or small business).
>

Previous contributors have access to the code, but it doesn't seem
like there is any way to go that route anymore.