Release Notes: This is the first public release of grsecurity 2.0-test for Linux 2.6.4. It contains all features of grsecurity 2.0 CVS as of today.
Release Notes: This release includes PaX updates and kernel interpretation of inheritance, resulting in huge memory savings. It has been ported to the 2.4.25 kernel.
Release Notes: This release includes PaX updates and has been ported to the 2.4.25 kernel.
Release Notes: Changes in this release include documentation updates, performance enhancements, an initrd bugfix, and PaX updates including PT_GNU_STACK and PT_GNU_HEAP support. grsecurity 1.9.13 is for the 2.4.23 kernel, and gradm has been updated for this release.
Release Notes: With this release, a milestone in the project has been reached. It is now possible to create a policy for the entire system with no configuration. The system performs a complex graph and heuristic analysis to create the policy, and then undergoes an automatic policy audit and correction to ensure the policy is truly least privilege. Learning for an entire role or a single process is supported as well.
Release Notes: Changes in this release include a fix for an ACL consistency, a fix for the rand_tcp_isns sysctl option, PaX updates, and better default ACL enforcement.
Release Notes: Changes in this release include bugfixes and several new object modes that control the creation or modification of files to be setuid or setgid, as well as the creation or deletion of objects. This enables the administrator to create more fine-grained policies. It has been released for the 2.4.21 kernel. gradm has been updated to 2.0-pre5 for this release.
Release Notes: Changes in this release include bugfixes for the RLIMIT_NPROC restriction and ACL recreation. It has been released for the 2.4.21 kernel. gradm has been updated to 1.9.10 for this release.
Release Notes: Changes include a complete rewrite of the ACL system, which is now role-based. User, group, and special roles are implemented. IP-based roles, role transition tables, and roles requiring no authentication have been added. In addition, non-root users are allowed to authenticate to special roles.
Release Notes: This release includes new features from PaX: non-executable and read-only kernel pages for i386, randomization of executable base for Alpha, SPARC, SPARC64, and PA-RISC, and randomization of the stack and mmap bases for PowerPC. gradm has been updated to 1.9.9f.