>> > How about hardened? Does ZFS have any problems interacting with >> > grsecurity or a hardened profile? >> >> Has anyone tried hardened and ZFS together? > > I did - I had some problems, but I'm not sure if they were caused by the > combination of ZFS and hardened. There were some issues updating kernel and > ZFS > (most likely due to ZFS on root and me using ~arch hardened-sources and the > live ebuild for zfs). > There are some hardened options that are known to be not working (constify was > one of them but that should be patched now). I think another one was HIDESYM. > > There is a (more or less regularly updated blogpost by prometheanfire > (installation guide zfs+hardened+luks [1]). > So you could ask him or ryao (he seems to support hardened+zfs at least to > a certain degree). > [1] > https://mthode.org/posts/2013/Sep/gentoo-hardened-zfs-rootfs-with-dm-cryptluks-062/
Thanks for the link. It doesn't look too bad. - Grant
