Grsecurity

CloudLinux kernel and Grsecurity

CloudLinux 5.x kernel includes some of the most requested features of grsecurity.

CloudLinux 6.x kernel doesn't include grsecurity features yet. There is no ETA at this moment for the inclusion

The kernel supports TPE grsecurity feature out of the box. You can configure it using following files:

To enable TPE feature in a standard way just add following to the end of your /etc/sysctl.conf

#GRsecurity 
kernel.grsecurity.tpe = 1 
kernel.grsecurity.tpe_restrict_all = 1 
kernel.grsecurity.grsec_lock = 1

And do:

# sysctl -p