https://wiki.openvz.org/api.php?action=feedcontributions&feedformat=atom&user=Rebecafg 2026-06-13T19:09:50Z User contributions MediaWiki 1.31.1 https://wiki.openvz.org/index.php?title=Grsecurity&diff=9018 2010-08-22T11:25:49Z

<p>Rebecafg: </p> <hr /> <div>There is a huge demand from people for support of grsecurity on OpenVZ.<br /> However, unfortunately, grsecurity patch doesn't work as is (nor even applies) with OpenVZ kernel.<br /> There were some efforts of supporting grsec in [http://bugzilla.openvz.org/show_bug.cgi?id=601 bug #607], but<br /> failed and the grsecurity patch was never stable with OpenVZ.<br /> <br /> So instead OpenVZ team selected another approach. We port the features of grsecurity most requested by users and add them, maintain,<br /> document and support.<br /> <br /> == TPE (Trusted Path Execution) ==<br /> <br /> Starting from 2.6.18-028stab047.1 stable kernels OpenVZ kernels support TPE grsecurity feature out of the box.<br /> Which means root user can configure TPE inside VE as usual, i.e. via the following /proc files:<br /> * /proc/sys/kernel/grsecurity/grsec_lock<br /> * /proc/sys/kernel/grsecurity/tpe<br /> * /proc/sys/kernel/grsecurity/tpe_gid<br /> * /proc/sys/kernel/grsecurity/tpe_restrict_all<br /> *[http://www.superiorpapers.com/reasons.php buy term papers]<br /> <br /> To enable TPE feature in a standard way just type:<br /> # echo &lt;GID&gt; &gt; /proc/sys/kernel/grsecurity/tpe_gid<br /> # echo 1 &gt; /proc/sys/kernel/grsecurity/tpe<br /> ' lock grsecurity settings<br /> # echo 1 &gt; /proc/sys/kernel/grsecurity/grsec_lock<br /> <br /> == Links ==<br /> * http://www.grsecurity.net/<br /> <br /> [[Category: Kernel]]<br /> [[Category: HOWTO]]</div>

Rebecafg