From 2a26a582b5217524a82bb47646f470fb82e8a419 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Tue, 18 Apr 2017 20:28:48 -0300
Subject: Adds research/hardened

---
 research/hardened.mdwn | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 research/hardened.mdwn

(limited to 'research')

diff --git a/research/hardened.mdwn b/research/hardened.mdwn
new file mode 100644
index 0000000..15acd17
--- /dev/null
+++ b/research/hardened.mdwn
@@ -0,0 +1,28 @@
+[[!meta title="Hardened OS"]]
+
+grsecurity
+----------
+
+Basic install:
+
+    sudo apt-get -t jessie-backports install linux-image-4.9.0-2-grsec-amd64 linux-image-grsec-amd64
+    sudo apt-get install paxtest
+    sudo usermod -aG grsec-tpe `whoami`
+
+As root:
+
+    echo "kernel.grsecurity.rwxmap_logging = 0" > /etc/sysctl.d/kernel.grsecurity.rwxmap_logging.conf 
+    echo "kernel.grsecurity.grsec_lock = 1"     > /etc/sysctl.d/kernel.grsecurity.grsec_lock.conf
+
+As regular user, after reboot:
+
+    paxctl -cm /usr/bin/git-annex
+    paxctl -cm /usr/bin/qemu-img
+    paxctl -cm /usr/bin/qemu-system-x86_64
+
+References
+----------
+
+* https://micahflee.com/2016/01/debian-grsecurity/
+* https://nixaid.com/grsec-in-docker/
+* https://hardenedlinux.github.io/
-- 
cgit v1.2.3