[Devil-linux-develop] [fmII] grsecurity 1.9.9 released (Stable branch)

[<no...@fr...>]

This email is to inform you about the release of version '1.9.9' of
'grsecurity' through freshmeat.net. All URLs and other useful information
can be found at

    http://freshmeat.net/projects/grsecurity/

The changes in this release are as follows:
This release includes over 10,000 lines of changes. These changes
include consistently logging full paths, the addition of a
full-featured auditing system, randomized TCP ISNs, a new chroot
restriction, a new subject flag for the ACL system, and less entropy
usage. PaX now has compatibility support for libc5, uClibc, modula-3,
and glibc-2.0. In general, all code has been completely rewritten.
This release has been verified on i386, ppc, alpha, parisc, and
sparc64. 

Project description:
grsecurity is a complete security system for Linux 2.4 that implements
a detection/prevention/containment strategy. It prevents most forms
of address space modification, confines programs with least privilege
via its process-based MAC system, hardens syscalls, and provides many
of the OpenBSD randomness features. It was written for performance,
ease-of-use, and security. The MAC system has an intelligent
learning-mode, and all of grsecurity supports a feature that logs the
IP of the attacker that causes an alert or audit. 

If you would like to cancel subscription to releases of this project,
login to freshmeat.net and choose 'home' from the personal menubar at the
top of the page. You'll be presented with a list of projects you're
subscribed to in the right column, which you may cancel by highlighting
the project in question and clicking the 'delete' button.

Sincerely,
freshmeat.net