about summary refs log tree commit diff stats
path: root/core/hardening.html
diff options
context:
space:
mode:
authorSilvino Silva <silvino@bk.ru>2018-03-08 19:53:47 +0000
committerSilvino Silva <silvino@bk.ru>2018-03-08 19:53:47 +0000
commit4d8088a7f539a80144f1b426b529ccd7441b9ccb (patch)
treede72708c967ff9f00d0ee1e736833aeb5322f0e5 /core/hardening.html
parent29cb6d06ec42e1723bc6f89d6accdf8899b53e95 (diff)
downloaddoc-4d8088a7f539a80144f1b426b529ccd7441b9ccb.tar.gz
core linux kernel revision
Diffstat (limited to 'core/hardening.html')
-rw-r--r--core/hardening.html15
1 files changed, 6 insertions, 9 deletions
diff --git a/core/hardening.html b/core/hardening.html
index 91cd8e9..8c100b2 100644
--- a/core/hardening.html
+++ b/core/hardening.html
@@ -10,18 +10,16 @@
 
         <h1>2.2. Hardening</h1>
 
-        <p>Kernel in ports have upstream linux kernel and
-        grsecurity patch, it should break building some packages,
-        install follow tools;</p>
+        <p>Kernel <a href="ports/linux-gnu">linux-gnu</a> port have
+        <a href="apparmor.html">apparmor</a> default options. AppArmor
+        enforce rules on applications based on security policies.
+        User space tools are provided by apparmor port and its dependencies, 
+        install them;</p>
 
         <pre>
-        $ sudo prt-get depinst gradm paxtest paxctld checksec lynis
+        $ sudo prt-get depinst checksec lynis apparmor
         </pre>
 
-        <p>Information about <a href="grsecurity.html">grsecurity</a> kernel
-        configuration, <a href="grsecurity.html#pax">pax</a> and
-        <a href="grsecurity.html#gradm">gradm</a>.</p>
-
         <p>Lynis gives a view of system overall configuration, without changing
         default profile it runs irrelevant tests. Create a lynis profile by
         coping default one and run lynis;</p>
@@ -41,7 +39,6 @@
 
         <p>Add unnecessary tests to profile to have less noise.</p>
 
-
         <a href="index.html">Core OS Index</a>
         <p>This is part of the c9 Manual.
         Copyright (C) 2017