News: 0001502711

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

OpenPaX Announced As "Open-Source Alternative To GrSecurity" With Free Kernel Patch

([Linux Security] 2 Hours Ago OpenPaX)


Enterprise security firm Edera today is announcing OpenPaX that they promoted in their advance press notice as a "new open-source alternative to GrSecurity." GrSecurity being the firm focused on providing out-of-tree Linux kernel patches focused in the name of security enhancements. With OpenPaX they are open-source and publicly available kernel patch for mitigating common memory safety errors and other system hardening.

OpenPaX aims to provide better runtime memory safety protections, better hardening systems against application-level memory safety attacks, and related functionality. The OpenPaX code is available under the GPLv2.

Today's [1]press release hitting the wire notes:

"OpenPaX is a Linux kernel patch and alternative to the original PaX patch (now distributed as part of grsecurity) on modern hardware for system administrators who need to provide a layer of defense against memory safety-related vulnerabilities. The Linux kernel community also gains access to an open source hardening patchset and some features of OpenPaX will be upstreamed as appropriate.

The introduction of OpenPaX is good news for Linux distros. Alpine Linux, for example, will return to shipping a PaX-enabled kernel in 3.21 as a technical preview. Further integration will happen in Alpine 3.22."

The OpenPaX kernel code is available via Edera's [2]linux-openpax on GitHub .



[1] https://www.prnewswire.com/news-releases/edera-restores-security-benefits-for-linux-application-memory-safety-with-openpax-302291633.html

[2] https://github.com/edera-dev/linux-openpax


Beryesa

debrouxl

So Richard and I decided to try to catch [the small shark].
With a great deal of strategy and effort and shouting, we managed to
maneuver the shark, over the course of about a half-hour, to a sort of
corner of the lagoon, so that it had no way to escape other than to
flop up onto the land and evolve. Richard and I were inching toward
it, sort of crouched over, when all of a sudden it turned around and --
I can still remember the sensation I felt at that moment, primarily in
the armpit area -- headed right straight toward us.
Many people would have panicked at this point. But Richard and
I were not "many people." We were experienced waders, and we kept our
heads. We did exactly what the textbook says you should do when you're
unarmed and a shark that is nearly two feet long turns on you in water
up to your lower calves: We sprinted I would say 600 yards in the
opposite direction, using a sprinting style such that the bottoms of
our feet never once went below the surface of the water. We ran all
the way to the far shore, and if we had been in a Warner Brothers
cartoon we would have run right INTO the beach, and you would have seen
these two mounds of sand racing across the island until they bonked
into trees and coconuts fell onto their heads.
-- Dave Barry, "The Wonders of Sharks on TV"