Linux kernel 0-day patching solution (RHEL4 RHEL5)

Cnbird2008 Column

1. Use Grsecurity or Pax kernel security patches and enable KERNEXEC protection.

2. Upgrade to 2.6.31-rc6 or 2.4.37.5 or later.

3. If you are using a RedHa tEnterprise Linux 4/5 system or Centos4/5 system, you can use the following simple operations to prevent attacks.

Add the following content to the/etc/modprobe. conf file:

Install pppox/bin/true
Install bluetooth/bin/true
Install appletalk/bin/true
Install ipx/bin/true
Install sctp/bin/true

Obviously, the third solution is relatively simple and effective, with minimal impact on your business. If you are not familiar with compiling and installing the Linux kernel, do not use the first two solutions, otherwise, your system may never start.