hi
i w'll buy new dedicates server from nocster , and i want ask you abut GRSecurity Patch Update . i found this softwere in opitional softwere , i thought it is nice for more security , do you have any idea about it , is it important?
thank you

NAIF

http://www.grsecurity.net/

Originally posted by naif
hi
i w'll buy new dedicates server from nocster , and i want ask you abut GRSecurity Patch Update . i found this softwere in opitional softwere , i thought it is nice for more security , do you have any idea about it , is it important?
thank you

NAIF

While BurstNET installs GRSecurity for a $65 fee, i've found that it's very easily installed on your own, without paying them to do it. So, I would suggest that if you know what your doing, go ahead and do it. However, if your a newbie to the server industry, I would suggest having BurstNET do it for you to escape the "dead server" incident.

-- Jonathan

Installing Grsecurity can be a pain in the neck the first time you do it, and it may require you to call the NOC and have them boot from your backup kernel. However once you figure it out and develop a template of which options you want and which you don't (we have found that some options can affect certain programs on the server), then it's really not much more difficult than installing a regular kernel. I would imagine that Burst probably been using Grsecurity for a while, and has had a chance to figure out what works and what doesn't on a Cpanel-based shared hosting server. You might want to have them install it for you the first time. If nothing else, you can see what options they have chosen to enable/disable.

Or, if you feel confident in your ability to compile a kernel and apply patches, go for it yourself. I would recommend doing it before you put any customers on the server though. If you can't get it working the way you want it, you can always pay the $65 and have them do it at a later date.

One tip... with Grsecurity installed, you may sometimes run into weird problems on your server as a result of some of the built-in protection features. These are almost always logged to the system log file, and you can also view them by typing "dmesg" while logged in as root. That will help you pinpoint the issues and hopefully get them resolved more quickly.

.

I don't think this this guy knows the difference between a buffer overflow or a toilet overflow, so he'd better leave it in the hands of someone who has done it before :)

I'm usually one of the "do it yourself" guys, I generally manage to avoid first time problems by trying whatever it is I'm setting up at home first. I usually keep a few gigs of unpartitioned space on my home comp, for installing OSes to try things like that.