I am working on prototyping a product using 3.18 Linux kernel.I am trying to understand the ways to harden Linux Kernel? I am referring a documentation. The document refers to numerous configuration options that should be taken care of? Is that all to hardening the Kernel? Or are there other things that I should take care. P.S: I cannot move to a newer kernel version as the SoC is supported best on 3.18. I am using gcc-4.9 as the toolchain to build all the software.
Ways to Harden Linux Kernel?
linux;security;linux kernel;hardening
There exists the GrSecurity patchset, you can find the 3.18 kernel version patches here: http://deb.digdeo.fr/grsecurity-archives/kernel-3.18/Gentoo has a good page on setting of GrSecurity patches here: https://wiki.gentoo.org/wiki/Hardened/Grsecurity2_Quickstart you must patch the kernel and the compile with certain config options. GrSecurity offers the highest security you can get regarding Linux.Recently they have taken the stable patches off of their site, due to various political reasons, but they are still availible in the link above, or if you pay for it. Though obviously the patches are GPL'd.You can also look into SELinux, some info on the Gentoo page here https://wiki.gentoo.org/wiki/Project:SELinux though i'm sure there are many other places to read about it, but the Gentoo pages are often skewed more toward people who are going to be compiling themselves.