Language Selection

English French German Italian Portuguese Spanish

Linux Firewalls, 3rd Edition: Greater Security with GrSecurity

Filed under
HowTos

GrSecurity, formally known as Greater Security, is a kernel patch and userspace program for enhancing the security of a Linux system. GrSecurity, also referred to as Grsec, closes some avenues for attack and makes others much more difficult. Grsec implements a sophisticated Access Control List (ACL) for objects in Linux. The ACL can be used to provide much more granular control over files and other resources. For example, using a Grsec ACL, you can control what files will be shown as the result of a find command or which processes are included in process accounting logs.

Grsec also enables a system called PaX to restrict the capability of processes to alter memory space. This aspect alone renders many types of attacks involving overflows completely ineffective. Grsec also provides other protections such as stack randomization to make attacking the computer a more difficult task.

Full Story.

More in Tux Machines

An open source, e-commerce friendly CMS

Developers Peter Ivanov, Alex Raikov, and I came up with the idea for Microweber about five years ago, when we were all having problems building sites with the existing solutions. Microweber aims to take the complexity out of building a website, online shop, or blog, through a combination of drag-and-drop UI and real-time, WYSIWYG site edits. From the beginning, it's been an open source project. The earliest versions were licensed under GPL, but we switched to Apache License version 2.0 to allow the developers to protect their work and have commercial merits. Read more

Change a Ton of Unity Features in Ubuntu 15.04 with Unsettings

Unsettings is a graphical configuration program that can be used to change a large number of Unity settings. A new update has been released and now Ubuntu 15.04 is also supported. Read more

What is open source? Licensing, history, and more

Another example of open source: You wouldn’t buy a car with the hood welded shut, so why do we buy proprietary software? If you can’t see what’s going on and see what’s happening under the hood then you’re stuck with the car exactly the way it is and that might not be so great. While some people are fine with that, computer geeks shouldn’t be. We should want to get in there and tinker with it. Read more

Weekend in Techrights

Threats to FOSS Patents Links