commit: bbedbd01cc88971589882e76d65e8c5cd5c87e98 Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org> AuthorDate: Sat Apr 12 22:06:49 2014 +0000 Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org> CommitDate: Sat Apr 12 22:06:49 2014 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-patchset.git;a=commit;h=bbedbd01
3.13.9: reintroduce 4425_grsec_remove_EI_PAX.patch --- 3.13.9/0000_README | 4 ++++ 3.13.9/4425_grsec_remove_EI_PAX.patch | 19 +++++++++++++++++++ 2 files changed, 23 insertions(+) diff --git a/3.13.9/0000_README b/3.13.9/0000_README index 97a73be..02b8064 100644 --- a/3.13.9/0000_README +++ b/3.13.9/0000_README @@ -6,6 +6,10 @@ Patch: 4420_grsecurity-3.0-3.13.9-201404062127.patch From: http://www.grsecurity.net Desc: hardened-sources base patch from upstream grsecurity +Patch: 4425_grsec_remove_EI_PAX.patch +From: Anthony G. Basile <[email protected]> +Desc: Remove EI_PAX option and force off + Patch: 4430_grsec-remove-localversion-grsec.patch From: Kerin Millar <[email protected]> Desc: Removes grsecurity's localversion-grsec file diff --git a/3.13.9/4425_grsec_remove_EI_PAX.patch b/3.13.9/4425_grsec_remove_EI_PAX.patch new file mode 100644 index 0000000..cf65d90 --- /dev/null +++ b/3.13.9/4425_grsec_remove_EI_PAX.patch @@ -0,0 +1,19 @@ +From: Anthony G. Basile <[email protected]> + +Deprecate EI_PAX. + +X-Gentoo-Bug: 445600 +X-Gentoo-Bug-URL: https://bugs.gentoo.org/445600 + +diff -Nuar linux-3.7.1-hardened.orig/security/Kconfig linux-3.7.1-hardened/security/Kconfig +--- linux-3.7.1-hardened.orig/security/Kconfig 2012-12-26 08:39:29.000000000 -0500 ++++ linux-3.7.1-hardened/security/Kconfig 2012-12-26 09:05:44.000000000 -0500 +@@ -267,7 +267,7 @@ + + config PAX_EI_PAX + bool 'Use legacy ELF header marking' +- default y if GRKERNSEC_CONFIG_AUTO ++ depends on BROKEN + help + Enabling this option will allow you to control PaX features on + a per executable basis via the 'chpax' utility available at
