> ## Content Index
> Fetch the complete content index at: https://www.process-one.net/llms.txt
> Use this file to discover other available public pages before exploring further.

# Releasing Enhanced Security Debian AMI
- URL: https://www.process-one.net/blog/releasing-enhanced-security-debian-ami/
- Published: 2014-05-15T22:00:00.000Z
- Updated: 2024-09-20T13:08:54.000Z
- Author: ProcessOne

We have decided to share with [AWS](https://aws.amazon.com/ec2/?ref=process-one.net) community our basic linux platform. It is based on Debian and includes some security enhancements, that comes from integrating [grsecurity](https://grsecurity.net/?ref=process-one.net) into kernel. Previously i have released only kernel builds known as [ESK kernel](https://blog.onefellow.com/tagged/esk?ref=process-one.net), now we are presenting whole Debian that includes following changes:

- ESK kernel 3.2.58
- gradm 3.0
- paxctl 0.8
- TPE
- special groups for TPE: untrusted, readproc, symlinkrestr
- [RBAC](https://en.wikipedia.org/wiki/Role-based%5Faccess%5Fcontrol?ref=process-one.net) ready (*disabled by default*)
- performance modifications, see sysctl.conf
- default root filesystem is XFS
- you can build your own kernel, see dirty script in /usr/src/

AMI named **debian-7.5-amd64-grsec-enhanced-security** is available in US-East (*ami-64dc300c*) and EU-West (*ami-818747f6*) regions. After starting instance you can login into root account. Uses who need to have root access need to belong to special group ‘*admin*‘. For more information on using grsecurity kernel see [documentation](https://en.wikibooks.org/wiki/Grsecurity?ref=process-one.net). We will be providing updates to the AMI when it will be necessary. More information about ESK can be found [here](https://blog.onefellow.com/tagged/esk?ref=process-one.net), also you can track us for updates on twitter: [ProcessOne](https://twitter.com/processone?ref=process-one.net) or [me](https://twitter.com/zbyszek?ref=process-one.net).