Quick question on kernel sources and hardened profile.

mahtso · n00b Joined: 02 Jan 2024 Posts: 5 Location: United States

Hey all,

I have my system set to the hardened profile and had the distribution kernel on it for awhile. After having my install running for awhile I wanted to do the usual kernel handroll but just have one question. This is my first time using the Hardened profile and was wondering if the kernel sources replace my hardened kernel with a less secure one? I was trying to find information about it and I did find a mail that states the hardened sources were discontinued back in 2017 so I would like to know if I have anything else I need to do to make sure Im hardened with the regular sources or is all of the hardening in portage and tool chain these days?

Thanks for your time!
_________________
Its the guy. He did everything correct.

NeddySeagoon · Posted: Fri Feb 09, 2024 5:59 pm Post subject:

mahtso,

The hardened kernel disappeared when the grsecurity patches went behind a paywall.

A lot of the last available GPL grsecurity patches eventually found there way into the kernel too.
Then there is the Kernel Self Protection Project which has a list of Recommended Kernel Settings for various architectures.

Lastly, if you turn on

mahtso · n00b Joined: 02 Jan 2024 Posts: 5 Location: United States

Thank you for the reply! I appreciate you turning me to the right resources as I was having a hard time finding them. Gentoo really is the best and I just want to take advantage of what it has to offer.
_________________
Its the guy. He did everything correct.

pietinger · Posted: Fri Feb 09, 2024 9:02 pm Post subject:

Please let me add: https://wiki.gentoo.org/wiki/User:Pietinger/Tutorials/Kernel_Hardening_with_KSPP

;-)

_________________
https://wiki.gentoo.org/wiki/User:Pietinger