Re: 2.4-WOLK4.16 / 2.2-WOLK2.0

On Tue, Aug 24, 2004 at 05:15:07PM +0200, Marc-Christian Petersen wrote:

> please take a look here:

Before you complain about the lack of feedback... :) I'm playing with
2.6.8.1 now and have it patched thusly:

# /proc hardening (me)
# 8003_increase-kernel-defaults.patch (WOLK)
# 2409_netfilter-timeout-changes.patch (WOLK)
# 2401_nmap-freak-2.6.3.patch (WOLK)
# 2400_IPv4-stealth-2.6.3.patch (WOLK)
# 2208_netdev-random-core-2.6.3-fixes.patch (WOLK)
# 2207_netdev-random-pool_size-2.6.3.patch (WOLK)
# 2205_netdev-random-drivers-2.6.4-0.patch (WOLK; minor porting by me)
# 2204_netdev-random-core-2.6.3.patch (WOLK)
# shfs 0.35 from http://heanet.dl.sourceforge.net/sourceforge/shfs/shfs-0.35.tar.gz
# 2005_lufs-0.9.7-2.6.0-test9.patch (WOLK)
# devmapper patchset ftp://sources.redhat.com/pub/dm/patches/2.6-unstable/2.6.8.1/2.6.8.1-udm1.tar.bz2
# IMQ: http://www.linuximq.net/patchs/linux-2.6.8-imq-2.diff (build fix by me)
# 8006_ricmp-2.6.4-0.patch (WOLK)
# host-skas3-2.6.7-v2.patch (blaisorblade)

I can share the source and/or patches (also broken out) if anyone is
interested.

The /proc hardening stuff is pepped up a bit since my last attempt; the gid
is no longer hardcoded, and the default gid of entries like loadavg and sys/
can also be configured. It still can't be turned completely off though.

Andras

-- 
                 Andras Korn <korn at chardonnay.math.bme.hu>
                 <http://chardonnay.math.bme.hu/~korn/>	QOTD:
               Help stamp out, eliminate and abolish redundancy!


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
WOLK - Working Overloaded Linux Kernel
[email protected]
https://lists.sourceforge.net/lists/listinfo/wolk-devel