4

How can I install grsecurity on Ubuntu 16.04?

I tried searching google and I am not finding anything even on the ubuntu website or this site.

5
  • Just follow these instructions. You might need to further your googling skills my friend
    – user308164
    Aug 24 '16 at 5:44
  • Thanks, actually I used DuckDuckGo. That works in Google. You can answer the question and I will approve it.
    – Exprobsh
    Aug 24 '16 at 20:34
  • @luchonacho Those instructions are really for Debian, not Ubuntu or its kernel. Ubuntu kernel compilation instructions are here. I got pretty far in pulling the latest Ubuntu kernel sources and successfully applying the patches, but hit a problem with check-config complaining about various things after doing fakeroot debian/rules editconfig. Nov 22 '16 at 13:49
  • @luchonacho Trying to compile vanilla Linux with grsecurity patches on Ubuntu 16.10 yields Cannot use CONFIG_CC_STACKPROTECTOR_STRONG: -fstack-protector-strong available but compiler is broken Do you know why? Nov 24 '16 at 9:31
  • @AleksandrDubinsky No idea. Have you tried in 16.04? Or an older kernel?
    – user308164
    Nov 24 '16 at 13:39
2

You need to patch and compile your own kernel. The instructions are here: https://en.wikibooks.org/wiki/Grsecurity/Configuring_and_Installing_grsecurity

There is one caveat, however. Ubuntu normally uses its own kernel which is patched with useful fixes that haven't made it to mainline yet (like the MacBook Pro suspend/resume fix) and is compiled with an Ubuntu-approved config. Unfortunately, at the moment the Ubuntu patches aren't compatible with grsecurity. However, you should still grab the appropriate .config file, as explained here.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.