WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] Xen with Grsecurity

To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: Re: [Xen-users] Xen with Grsecurity
From: Brad Plant <bplant@xxxxxxxxxxxxxx>
Date: Fri, 30 Jun 2006 09:22:18 +1000
Delivery-date: Thu, 29 Jun 2006 16:23:18 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <f29fd8170606291605x1216d9ech31ba77198a30083a@xxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <f29fd8170606291605x1216d9ech31ba77198a30083a@xxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Thunderbird 1.5.0.4 (X11/20060604)
Hi Ugo,

> Has someone ever tried matching Xen and Grsecurity ?

Yes. Someone posted in the grsec forums about 2 weeks ago:
http://forums.grsecurity.net/viewtopic.php?t=1490

So far, it is only working with x86_64, but the guy that got it working
is coordinating with the Xen devs about getting head-xen.S patched
correctly. There are major differences between head.S and head-xen.S.

As for working, paxtest produces good results and the grsecurity MAC
system appears to be working correctly. No one else has posted to the
forum though, so it is possible that the only people to try the patch
are myself and the guy that made the patch.

Cheers,

Brad

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>