Language Selection

English French German Italian Portuguese Spanish

Linux Firewalls, 3rd Edition: Greater Security with GrSecurity

Filed under
HowTos

GrSecurity, formally known as Greater Security, is a kernel patch and userspace program for enhancing the security of a Linux system. GrSecurity, also referred to as Grsec, closes some avenues for attack and makes others much more difficult. Grsec implements a sophisticated Access Control List (ACL) for objects in Linux. The ACL can be used to provide much more granular control over files and other resources. For example, using a Grsec ACL, you can control what files will be shown as the result of a find command or which processes are included in process accounting logs.

Grsec also enables a system called PaX to restrict the capability of processes to alter memory space. This aspect alone renders many types of attacks involving overflows completely ineffective. Grsec also provides other protections such as stack randomization to make attacking the computer a more difficult task.

Full Story.

More in Tux Machines

Android Leftovers

Huawei P Smart review

With a decent 18:9 screen, the P Smart is a fine Android phone that should appeal to anyone looking for a cheap contract phone. However, the fact it’s so similar to the Honor 9 Lite (which costs £100 less when bought SIM-free) makes it hard to recommend, especially as the Honor has a couple of extra features – dual SIM and a second front camera – which the Huawei lacks. Read more

​Bogus Linux vulnerability gets publicity

I am so sick and tired of crap security news about Android and Linux. In the latest example, GoSecure claims it's discovered Chaos: a Stolen Backdoor Rising Again. Yeah. Right. Let's look closer. First, we have a neat name. Can't have a security bug these days without giving it a sexy name. But, what is it really? Well, it requires the attacker to break into the target system by "brute-forcing SSH credentials". Wait. What? To get this you need someone to log in to your server!? Read more

The best Linux web hosting services of 2018

Linux hosting is everywhere. Whether you're looking for a simple shared hosting account or a powerful dedicated server, the chances are that you'll be offered a Linux-based option first. In many cases, you might not care. If your hosting needs are simple, you'll probably choose an account based on the allocated web space, bandwidth and similar features – the operating system is so far down most people's priority list that often it's not even mentioned in comparison tables. Read more