Re: Hardening a Kernel post hardened-sources

On Fri, Mar 30, 2018 at 10:37 AM, Robert Sharp
<selinux-/[email protected]> wrote:
> I requested a quote from GRsecurity and they told me that although they a=
re
> looking at providing a package for personal customers they don't have one=
 at
> the moment. They recommended minipli as the next best thing...
>

Is there any way for you to try again while presenting yourself as a
business? In some jurisdictions saying you are a business is all it
takes to start a sole proprietorship. Otherwise, just pretend you are
affiliated with a (legally fictional) business.

It is necessary that I present myself as working on behalf of business
when requesting quotes for electronic components, etc., for personal
projects. They have a tendency to not care otherwise. A past employer
lets me use their email for this reason.

Perhaps Mr. Ceccarelli can indicate the size of his employer before I
try to contact them myself?

Cheers,
     R0b0t1

> What about the grsecurity-source overlay?
>
>
> On 29/03/18 11:47, Guillaume Ceccarelli wrote:
>
> Hi all,
>
> I=E2=80=99ve been a grsecurity customer for a little over two years now, =
and my use
> of it is as a small business, on Gentoo server installations. While I can=
=E2=80=99t
> disclose the amount of money I=E2=80=99m paying publicly because every de=
al is
> customized, I would encourage you to get in touch using the contact form =
on
> grsecurity.net and ask for a quote if you haven=E2=80=99t already.
>
> You might just end up with an arrangement you can afford, and grsec is st=
ill
> certainly worth having today. Not only for the feature set, but also for =
the
> constant looking over the mainline Linux kernel code, including fixing an=
d
> backporting more fixes than the regular kernel stable releases, and for
> knowledge / emails giving context to important kernel vulnerabilities whe=
n
> they occur.
>
>
> Best,
>
> =E2=80=93 Guillaume Ceccarelli
>
> On 28 Mar 2018, at 20:22, R0b0t1 <[email protected]> wrote:
>
> On Wed, Mar 28, 2018 at 12:40 PM, Alex Efros <[email protected]> wro=
te:
>
> Hi!
>
>
> On Wed, Mar 28, 2018 at 06:06:00PM +0100, Robert Sharp wrote:
>
> Does anyone know of a good, post GRSecurity guide to reasonable security
>
> for the kernel? In the absence of anything else I will have to go back
>
> to the KSPP list and start removing stuff until I can get a stable kernel=
.
>
>
> I'm using https://github.com/minipli/linux-unofficial_grsec, but it lacks
>
> Spectre and Meltdown mitigation at the moment (see issues). Still, I
>
> believe it's the best we can have now (better is probably paid GrSec, but
>
> AFAIK it's impossible or too costly to buy it for home or small business)=
.
>
>
>
> Previous contributors have access to the code, but it doesn't seem
> like there is any way to go that route anymore.
>
>