Subject: Re: [vserver] Kernel bug
From:Łukasz Czarniecki <luqe@sanki.roteh.pl>
Date: Thu, 14 Feb 2008 09:29:46 +0100

Natanael Copa pisze:
>> Which grsecurity option protects against this exploit?
> 
> as mentioned UDEREF prevents it for good, but KERNEXEC alone should
> prevent the code execution that this exploits relies on.

I was suprised to find out that both of these options are unavailiable 
on X86_64. Is there any specific reason for that? I'm not a grsecurity 
hacker. Now it seems that AMD64 arch is less secure.

>> Can you share your config?
> 
> svn cat svn://svn.alpinelinux.org/alpine-builder/trunk/kernel/vsgrsec/config
Thank you.

Lukasz Czarniecki