| 1 | <?xml version="1.0" encoding="UTF-8"?> |
1 | <?xml version="1.0" encoding="UTF-8"?> |
| 2 | <!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/en/gentoo-kernel.xml,v 1.55 2009/02/14 11:25:12 neysx Exp $ --> |
2 | <!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/en/gentoo-kernel.xml,v 1.56 2009/10/16 11:53:34 nightmorph Exp $ --> |
| 3 | |
3 | |
| 4 | <!DOCTYPE guide SYSTEM "/dtd/guide.dtd"> |
4 | <!DOCTYPE guide SYSTEM "/dtd/guide.dtd"> |
| 5 | <guide link="/doc/en/gentoo-kernel.xml"> |
5 | <guide link="/doc/en/gentoo-kernel.xml"> |
| 6 | <title>Gentoo Linux Kernel Guide</title> |
6 | <title>Gentoo Linux Kernel Guide</title> |
| 7 | <author title="Author"> |
7 | <author title="Author"> |
| … | |
… | |
| 39 | |
39 | |
| 40 | <!-- The content of this document is licensed under the CC-BY-SA license --> |
40 | <!-- The content of this document is licensed under the CC-BY-SA license --> |
| 41 | <!-- See http://creativecommons.org/licenses/by-sa/2.5 --> |
41 | <!-- See http://creativecommons.org/licenses/by-sa/2.5 --> |
| 42 | <license/> |
42 | <license/> |
| 43 | |
43 | |
| 44 | <version>1.22</version> |
44 | <version>1.23</version> |
| 45 | <date>2009-02-14</date> |
45 | <date>2009-10-16</date> |
| 46 | |
46 | |
| 47 | <chapter> |
47 | <chapter> |
| 48 | <title>Introduction</title> |
48 | <title>Introduction</title> |
| 49 | <section> |
49 | <section> |
| 50 | <body> |
50 | <body> |
| … | |
… | |
| 127 | </p> |
127 | </p> |
| 128 | |
128 | |
| 129 | </body> |
129 | </body> |
| 130 | </section> |
130 | </section> |
| 131 | <section> |
131 | <section> |
| 132 | <title>For servers: hardened-sources and rsbac-sources</title> |
132 | <title>For servers: hardened-sources</title> |
| 133 | <body> |
133 | <body> |
| 134 | |
134 | |
| 135 | <p> |
135 | <p> |
| 136 | <c>hardened-sources</c> is based on the official Linux kernel and is targeted at |
136 | <c>hardened-sources</c> is based on the official Linux kernel and is targeted at |
| 137 | our users running Gentoo on server systems. It provides patches for the various |
137 | our users running Gentoo on server systems. It provides patches for the various |
| … | |
… | |
| 140 | link="http://grsecurity.net">grsecurity</uri>), together with |
140 | link="http://grsecurity.net">grsecurity</uri>), together with |
| 141 | stability/security-enhancements. Check |
141 | stability/security-enhancements. Check |
| 142 | <uri>http://www.gentoo.org/proj/en/hardened/</uri> for more information. |
142 | <uri>http://www.gentoo.org/proj/en/hardened/</uri> for more information. |
| 143 | </p> |
143 | </p> |
| 144 | |
144 | |
| 145 | <p> |
|
|
| 146 | <c>rsbac-sources</c> is a 2.6-based kernel. It contains patches to use Rule Set |
|
|
| 147 | Based Access Controls (<uri link="http://www.rsbac.org">RSBAC</uri>). It is |
|
|
| 148 | maintained by the <uri link="/proj/en/hardened/rsbac/">RSBAC project</uri>, a |
|
|
| 149 | sub-project of Gentoo Hardened. |
|
|
| 150 | </p> |
|
|
| 151 | |
|
|
| 152 | <impo> |
145 | <impo> |
| 153 | These kernels provide powerful patches for enhanced security. Please read the |
146 | This kernel provides powerful patches for enhanced security. Please read the |
| 154 | <uri link="/proj/en/hardened/">documentation</uri> before you use them. |
147 | <uri link="/proj/en/hardened/">documentation</uri> before you use it. |
| 155 | </impo> |
148 | </impo> |
| 156 | |
149 | |
| 157 | </body> |
150 | </body> |
| 158 | </section> |
151 | </section> |
| 159 | <section> |
152 | <section> |
| 160 | <title>Architecture dependent kernels</title> |
153 | <title>Architecture dependent kernels</title> |
| 161 | <body> |
154 | <body> |
| 162 | |
155 | |
| 163 | <p> |
156 | <p> |
| 164 | <c>hppa-sources</c>, <c>mips-sources</c>, <c>sh-sources</c>, |
157 | <c>cell-sources</c>, <c>mips-sources</c>, <c>sh-sources</c>, |
| 165 | <c>sparc-sources</c>, and <c>xbox-sources</c> are, as their names suggest, |
158 | <c>sparc-sources</c>, and <c>xbox-sources</c> are, as their names suggest, |
| 166 | patched to run best on specific architectures. They also contain some of the |
159 | patched to run best on specific architectures. They also contain some of the |
| 167 | patches for hardware and features support from the other patch sets mentioned |
160 | patches for hardware and features support from the other patch sets mentioned |
| 168 | above and below. |
161 | above and below. |
| 169 | </p> |
162 | </p> |
| … | |
… | |
| 384 | </p> |
377 | </p> |
| 385 | |
378 | |
| 386 | </body> |
379 | </body> |
| 387 | </section> |
380 | </section> |
| 388 | <section> |
381 | <section> |
|
|
382 | <title>hppa-sources</title> |
|
|
383 | <body> |
|
|
384 | |
|
|
385 | <p> |
|
|
386 | <c>hppa-sources</c> was a 2.6 kernel with patches applied to improve hardware |
|
|
387 | compatibility for the HPPA architecture. These patches have been developed |
|
|
388 | and included in the mainline kernel. HPPA users can now run any recent kernel |
|
|
389 | with no need for extra patches. |
|
|
390 | </p> |
|
|
391 | |
|
|
392 | </body> |
|
|
393 | </section> |
|
|
394 | <section> |
| 389 | <title>rsbac-dev-sources</title> |
395 | <title>rsbac-dev-sources</title> |
| 390 | <body> |
396 | <body> |
| 391 | |
397 | |
| 392 | <p> |
398 | <p> |
| 393 | The <c>rsbac-dev-sources</c> kernels can now be found under the |
399 | The <c>rsbac-dev-sources</c> kernels can now be found under the |
| 394 | <c>rsbac-sources</c> package. |
400 | <c>rsbac-sources</c> package. |
|
|
401 | </p> |
|
|
402 | |
|
|
403 | </body> |
|
|
404 | </section> |
|
|
405 | <section> |
|
|
406 | <title>rsbac-sources</title> |
|
|
407 | <body> |
|
|
408 | |
|
|
409 | <p> |
|
|
410 | <c>rsbac-sources</c> was a 2.6-based kernel. It contained patches to use Rule |
|
|
411 | Set Based Access Controls (<uri link="http://www.rsbac.org">RSBAC</uri>). It has |
|
|
412 | been removed due to lack of maintainers. Use <c>hardened-sources</c> if you need |
|
|
413 | additional security features. |
| 395 | </p> |
414 | </p> |
| 396 | |
415 | |
| 397 | </body> |
416 | </body> |
| 398 | </section> |
417 | </section> |
| 399 | <section> |
418 | <section> |