Thanks to all that answered. This is going to take some serious study on my part before it makes sense for me to try anything, even in a VM.
I appreciate all the info. Cheers, Mark On Tue, Aug 12, 2014 at 3:03 AM, Alex Efros <[email protected]> wrote: > Hi! > > I also can confirm workstation with GrSecurity+PaX (without RBAC/SeLinux) > are very ease to setup and works very well nowadays - all you need is > carefully set kernel options related to GrSecurity and PaX and rebuild all > system using hardened gcc. > > Problematic software are nvidia-drivers (it works, but require extra > paxmarking for some apps like Xorg and mplayer) and vmware (usually need > extra patches and doesn't work on amd64 for years - virtualbox and > qemu/kvm works ok, so it's not a big deal). > > -- > WBR, Alex. >
