grsecurity
@grsecurity.bsky.social
Foundational security for the Linux kernel. Solving the most difficult memory unsafety problems. Created by @opensrcsec
Testcase fixes were sent upstream by Mathias Krause here: lore.kernel.org/bpf/20241104...
[PATCH bpf-next 0/3] test_bpf.ko blinding fixes - Mathias Krause
lore.kernel.org
November 4, 2024 at 11:29 PM
Testcase fixes were sent upstream by Mathias Krause here: lore.kernel.org/bpf/20241104...
If you're curious, we also fixed the failing vanilla testcases, without which the speedup would have appeared even larger than 30x. Every grsecurity option really means every single one, including RAP, PRIVATE_KSTACKS, KERNEXEC, UDEREF, AUTOSLAB, KERNSEAL, etc.
November 4, 2024 at 8:49 PM
If you're curious, we also fixed the failing vanilla testcases, without which the speedup would have appeared even larger than 30x. Every grsecurity option really means every single one, including RAP, PRIVATE_KSTACKS, KERNEXEC, UDEREF, AUTOSLAB, KERNSEAL, etc.