Grsecurity

grsecurity: Linux Kernel Security Enhancement

grsecurity is a Linux kernel security enhancement that provides additional security features such as address space protection, valuable auditing for compliance, proactive security features to harden systems against potential attacks, and more.

What is Grsecurity?

grsecurity is a set of patches for the Linux kernel that provides enhanced security and system hardening features. Some of the key features it provides include:

• Address Space Layout Randomization (ASLR) - Randomizes the location of key data areas in memory to make it harder for attackers to target them.
• Role Based Access Control (RBAC) - Allows restricting which users/programs can access certain files/resources.
• PaX - Adds features like non-executable memory pages to block certain exploit techniques.
• Auditing - Detailed logging of security-relevant events on the system.
• Various hardening features - Tweaks and adjustments to remove or reduce common attack vectors.

Overall, grsecurity greatly enhances the security of Linux systems against attacks and intrusions. The grsecurity patch set has to be applied to the Linux kernel source code and a custom kernel compiled and installed. It is maintained primarily by a small team of security researchers and developers focused on continued security innovation.

Grsecurity Features

Official Links