Date: Tuesday, September 9, 2014 @ 11:09:37 Author: thestinger Revision: 118704
upgpkg: linux-grsec 3.16.2.201409082129-2 enable KERNEXEC on x86_64 Modified: linux-grsec/trunk/PKGBUILD linux-grsec/trunk/config linux-grsec/trunk/config.x86_64 ---------------+ PKGBUILD | 6 +++--- config | 2 +- config.x86_64 | 13 ++++++------- 3 files changed, 10 insertions(+), 11 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2014-09-09 08:31:29 UTC (rev 118703) +++ PKGBUILD 2014-09-09 09:09:37 UTC (rev 118704) @@ -12,7 +12,7 @@ _timestamp=201409082129 _grsec_patch="grsecurity-$_grsecver-$_pkgver-$_timestamp.patch" pkgver=$_pkgver.$_timestamp -pkgrel=1 +pkgrel=2 arch=('i686' 'x86_64') url=https://grsecurity.net/ license=('GPL2') @@ -33,8 +33,8 @@ '567c903c21a932c6265eae1dee9ac708e33fc5405d69204de2588760ed0bde72' '1f2cb71892020365e8f064182ddc2f534d8bae2c89f8733775e683795ae67642' 'SKIP' - 'fbe4b1b1920f586db1b87f7ef828251e231e82fd31aaa71bd8f9594eefc8a659' - 'ef5548c9c95813a3c9a281f6096afdcad0e89593e76377e89483bbe44dc02e13' + 'f2ee30755e8ccf9605f9272eb28f855dd959042c05a9b8aad3527313fcd5c714' + '26d2004a35795c444ee25830f532b993bb17cb4b2db733221b49e331f4d6933a' 'ca7e718375b3790888756cc0a64a7500cd57dddb9bf7e10a0df22c860d91f74d' '1256b241cd477b265a3c2d64bdc19ffe3c9bbcee82ea3994c590c2c76e767d99' 'f36f61a0a72bcb0a9c04264343503bfbf927c9ea0db819e66734a3933b060588') Modified: config =================================================================== --- config 2014-09-09 08:31:29 UTC (rev 118703) +++ config 2014-09-09 09:09:37 UTC (rev 118704) @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 3.16.2.201409082129-1 Kernel Configuration +# Linux/x86 3.16.2.201409082129-2 Kernel Configuration # # CONFIG_64BIT is not set CONFIG_X86_32=y Modified: config.x86_64 =================================================================== --- config.x86_64 2014-09-09 08:31:29 UTC (rev 118703) +++ config.x86_64 2014-09-09 09:09:37 UTC (rev 118704) @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 3.16.2.201409082129-1 Kernel Configuration +# Linux/x86 3.16.2.201409082129-2 Kernel Configuration # CONFIG_64BIT=y CONFIG_X86_64=y @@ -6346,10 +6346,6 @@ # CONFIG_RT_MUTEX_TESTER is not set # CONFIG_DEBUG_SPINLOCK is not set # CONFIG_DEBUG_MUTEXES is not set -# CONFIG_DEBUG_WW_MUTEX_SLOWPATH is not set -# CONFIG_DEBUG_LOCK_ALLOC is not set -# CONFIG_PROVE_LOCKING is not set -# CONFIG_LOCK_STAT is not set # CONFIG_DEBUG_ATOMIC_SLEEP is not set # CONFIG_DEBUG_LOCKING_API_SELFTESTS is not set # CONFIG_LOCK_TORTURE_TEST is not set @@ -6482,6 +6478,7 @@ # # Grsecurity # +CONFIG_PAX_KERNEXEC_PLUGIN=y CONFIG_PAX_PER_CPU_PGD=y CONFIG_TASK_SIZE_MAX_SHIFT=42 CONFIG_PAX_USERCOPY_SLABS=y @@ -6520,8 +6517,9 @@ CONFIG_PAX_MPROTECT=y # CONFIG_PAX_MPROTECT_COMPAT is not set # CONFIG_PAX_ELFRELOCS is not set -# CONFIG_PAX_KERNEXEC is not set -CONFIG_PAX_KERNEXEC_PLUGIN_METHOD="" +CONFIG_PAX_KERNEXEC=y +CONFIG_PAX_KERNEXEC_PLUGIN_METHOD_BTS=y +CONFIG_PAX_KERNEXEC_PLUGIN_METHOD="bts" # # Address Space Layout Randomization @@ -6539,6 +6537,7 @@ CONFIG_PAX_MEMORY_STRUCTLEAK=y CONFIG_PAX_MEMORY_UDEREF=y CONFIG_PAX_REFCOUNT=y +CONFIG_PAX_CONSTIFY_PLUGIN=y CONFIG_PAX_USERCOPY=y # CONFIG_PAX_USERCOPY_DEBUG is not set CONFIG_PAX_SIZE_OVERFLOW=y