diff options
author | Silvino Silva <silvino@bk.ru> | 2018-03-08 19:53:47 +0000 |
---|---|---|
committer | Silvino Silva <silvino@bk.ru> | 2018-03-08 19:53:47 +0000 |
commit | 4d8088a7f539a80144f1b426b529ccd7441b9ccb (patch) | |
tree | de72708c967ff9f00d0ee1e736833aeb5322f0e5 /core/hardening.html | |
parent | 29cb6d06ec42e1723bc6f89d6accdf8899b53e95 (diff) | |
download | doc-4d8088a7f539a80144f1b426b529ccd7441b9ccb.tar.gz |
core linux kernel revision
Diffstat (limited to 'core/hardening.html')
-rw-r--r-- | core/hardening.html | 15 |
1 files changed, 6 insertions, 9 deletions
diff --git a/core/hardening.html b/core/hardening.html index 91cd8e9..8c100b2 100644 --- a/core/hardening.html +++ b/core/hardening.html @@ -10,18 +10,16 @@ <h1>2.2. Hardening</h1> - <p>Kernel in ports have upstream linux kernel and - grsecurity patch, it should break building some packages, - install follow tools;</p> + <p>Kernel <a href="ports/linux-gnu">linux-gnu</a> port have + <a href="apparmor.html">apparmor</a> default options. AppArmor + enforce rules on applications based on security policies. + User space tools are provided by apparmor port and its dependencies, + install them;</p> <pre> - $ sudo prt-get depinst gradm paxtest paxctld checksec lynis + $ sudo prt-get depinst checksec lynis apparmor </pre> - <p>Information about <a href="grsecurity.html">grsecurity</a> kernel - configuration, <a href="grsecurity.html#pax">pax</a> and - <a href="grsecurity.html#gradm">gradm</a>.</p> - <p>Lynis gives a view of system overall configuration, without changing default profile it runs irrelevant tests. Create a lynis profile by coping default one and run lynis;</p> @@ -41,7 +39,6 @@ <p>Add unnecessary tests to profile to have less noise.</p> - <a href="index.html">Core OS Index</a> <p>This is part of the c9 Manual. Copyright (C) 2017 |