| Minimum Kernel Hardening | |
|
|
Buffer Overflow  Lnux-Sec.net/Audit/Tools.sw SW tools to check for buffer overflows Subterrain.net buffer overflow tutorial Destroy.net | |
Kernel Hardening |
|
SecurityPortal Zone-H.org LKM PacketStormSecurity.nl LKM Hacking l0t3k.org Runtime Kernel Kmem Hacking p-trace kernel problem
SinusPL.net 2-4.20 patch and ptrace exploit code Redhat.com Exec-Shield ^ ( also see debian breakin followup ) Silkurezza.org Angel LCAP prevent any further kernel modules loading LIDS Linux Intrusion Detection System HowTo.Lycos.com LIDS howto Sans.org Deploying Enhanced Kernel Security ClubLinux LIDS - Linux Intrusion Detection System TurboLinux LIDS SecurityFocus.com LIDS - 4 part articles SecureLinux.org grsecurity - ACL GRsecurity.net ( openwall for 2.4 kernels ) OpenWall OWL - stops most buffer overflow, stops /tmp race condition Debian.org Openwall w/ 2.4 Debian.org LSM - Linux Security Modules TrustedDebian.org Optusnet.com.au GrSecurity + XFS SourceForge.net Wolk - GrSecurity + XFS + others IBM.com SPP for gcc-3.x Kaladix.org HyperSec kernel Isec.pl Knox - non-executable page protection mechanism Incident-Response.org KSec - Kernel Security Checker Linux Port LockDown Network Assoc LoMac TisLabs.com LoMac - Low Water-Mark Mandatory Access Control KSTAT Kernel Security Therapy Anti-Trolls LCAP Linux Kernel Capability Remover Gentoo.org ProPolice ( GCC patch ) IBM.com SSP - stack-smashing protector ogi.edu StackGuard Immunix.org LSM - Linux Security Modules Immunix.org Stackguard - defend against stack smashing StackShield defend against stack smashing Research.AvayaLabs.com Libsafe - defend against buffer overflow ( test it ) kernel.org Linux-Privs ( Fcap ) Angelfire.com MegaBlaster - protect against buffer overflow LinSec.org MAC - Mandatory Access Control Virtualave.net Pax - defend against buffer overflow PAX.GRSecurity.net Posix ACL RSBAC.de Rule Set Based Access Control for Linux RSBAC.org TrustedDebian.org RSBAC Starzetz.com RSX - Runtime addressSpace eXtender SourceForge.net St Jude EnergyMech.net Stealth Kernel Patch ^ protect against port scans Linux Trustee TheAimsGroup.com HAP-Linux ( Hank-APproved Linux ) |
|