[Devil-linux-develop] [fmII] grsecurity 1.9.8-rc1 released (Development branch)

[<no...@fr...>]

This email is to inform you of release '1.9.8-rc1' of 'grsecurity' through
freshmeat.net. All URLs and other useful information can be found at
http://freshmeat.net/projects/grsecurity/

The changes in this release are as follows:
This version includes a rewrite of ACL system internals. Several new
features were added to the ACL system including an override flag, the
PaX flags, and a flag that protects the shared memory of the subject.
A new feature which prevents modification of the running kernel via
/dev/mem and still allows proper execution of XFree86 has been
implemented. If an attacker generates any alert or audit, their IP
will be logged as well. A full set of secure ACLs for Debian has also
been included with the new version of gradm.

Project description:
grsecurity is a complete security system for Linux 2.4 that implements
a detection/prevention/containment strategy. It prevents most forms
of address space modification, confines programs with least privilege
via its process-based MAC system, hardens syscalls, and provides many
of the OpenBSD randomness features. It was written for performance,
ease-of-use, and security. The MAC system has an intelligent
learning-mode, and all of grsecurity supports a feature that logs the
IP of the attacker that causes an alert or audit.

If you would like to cancel subscription to releases of this project,
login to freshmeat.net and choose 'home' from the personal menubar at the
top of the page. You'll be presented with a list of projects you're
subscribed to in the right column, which you may cancel by highlighting
the project in question and clicking the 'delete' button.

Sincerely,
freshmeat.net