Special Kernel - problems

Klavs · Guru Joined: 22 May 2002 Posts: 536 Location: Denmark

Hi guys,

I have a server, for which I need to run:

FreeSWAN (IPSEC - see www.freeswan.org),
VServer (kinda like BSD's jail - just better - see www.solucorp.qc.ca :-)

and I would also like to have

crypto-sources (which I believe is grsecurity & kerneli patch in one? - I only need kerneli patch, cause I want to make an encrypted filesystem or two).

Can you guys give me any pointers as how I could swing this?

I'm guessing I can only patch them one at a time, and then ask some kernel programmer how to fix all the problems that patching the second - will show?
_________________
Best regards,

Klavs Klavsen
Denmark

Working with Unix is like wrestling a worthy opponent.
Working with windows is like attacking a small whining child
who is carrying a .38.

pfeifer · Posted: Sat Sep 28, 2002 2:24 pm Post subject:

you don't need the crypto-sources necessarily.

you can use the gentoo-sources-2.4.19-r9
look in /usr/portage/sys-kernel/gentoo-sources/
uncomment line 47 in gentoo-sources-2.4.19-r9.ebuild
should look like this (line 47 is the last one of this snippet):

#Thers is some anti-grsecurity sentiment, so I'll
#make it easy not to patch it in.
#Uncomment the following line to not patch grsecurity.
#rm 14*

now emerge gentoo-sources

that will keep grsecurity out of the kernel and the cryptoapi should still be there.

hope this helps,

_j_