Tweet
Reading this https://www.cloudlinux.com/kernelcar...-live-patching I thought something, I don know if it sounds logical or viable, its just a thought. Anyway,[br][br]Many of us use CloudLinux on our web hosting servers in combination with a panel like cPanel / Plesk / etc. [br][br]But we also have more servers, doing other jobs, like standalone mail servers, dedicated mysql servers, dns servers / clusters, custom backup servers or R1Soft or similar solutions, development boxes and/or servers that don require panel or CloudLinux because they host only one or two big-huge sites.[br][br]Those servers are primarily something like Centos or Debian or Ubuntu basically. With no panel or any extra software.[br][br]How about providing a custom kernel as a company like a kernel using Grsecurity with all (or most) security features ( https://grsecurity.net/features.php ) of grsecurity enabled for those distros and live patch them too. So its basically 2 in 1.
-
-
GrSecurity ... sucks
1. It doesn stop DirtyCow
2. It is not GPL (you cannot buy it/redistribute it with your kernel -- they don want it to be GPL)
You are better off with KernelCare + SELinux / AppArmor -
Sorry I didn knew that (2), I imagined they are GPL since they mention it in downloads link.Comment
Comment