Redcore Linux Project Forum

Red_Eric

Member

Registered: 2023-05-22

Posts: 2

Serveur Web

Hi,

I see one Redcore's distro, usual there are few distro. I want to build a hardened server web. But, how is hardened this only distro ? With SElinux, PAX, Grsecurity ?

Thanks

Best regards

Eric

V3n3RiX

Administrator

Registered: 2021-11-04

Posts: 30

Re: Serveur Web

Redcore is built using Gentoo's hardened profile. Which means SSP (stack smashing protection), FORTIFY_SOURCE level 3, libc assertions, PIE (position independent executables), stack clash protection, RELRO and control flow technology are all enabled by default. We do not use SElinux, but Apparmor is enabled by default instead.

korhal /jails/redcore/amd64/scripts # ./tc-check /bin/bash
/bin/bash:
 Position Independent Executable: yes
 Stack protected: yes
 Fortify Source functions: yes
 Read-only relocations: yes
 Immediate binding: yes