Editing Grsecurity
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.
The edit can be undone.
Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.
Latest revision | Your text | ||
Line 9: | Line 9: | ||
== TPE (Trusted Path Execution) == | == TPE (Trusted Path Execution) == | ||
− | Starting from 2.6.18-028stab047.1 stable kernels OpenVZ kernels support | + | Starting from 2.6.18-028stab047.1 stable kernels OpenVZ kernels support TPE grsecurity feature out of the box. |
Which means root user can configure TPE inside VE as usual, i.e. via the following /proc files: | Which means root user can configure TPE inside VE as usual, i.e. via the following /proc files: | ||
* /proc/sys/kernel/grsecurity/grsec_lock | * /proc/sys/kernel/grsecurity/grsec_lock | ||
Line 21: | Line 21: | ||
' lock grsecurity settings | ' lock grsecurity settings | ||
# echo 1 > /proc/sys/kernel/grsecurity/grsec_lock | # echo 1 > /proc/sys/kernel/grsecurity/grsec_lock | ||
− | |||
− | |||
− | |||
[[Category: Kernel]] | [[Category: Kernel]] | ||
[[Category: HOWTO]] | [[Category: HOWTO]] |