Author: hawk Date: Thu Feb 25 21:47:04 2010 GMT
Module: packages Tag: Titanium
---- Log message:
- re-added grsecurity options
---- Files affected:
packages/kernel-bare-vserver:
kernel-bare-vserver-x86_64.config (1.1.2.25 -> 1.1.2.26) ,
kernel-bare-vserver-x86.config (1.1.2.26 -> 1.1.2.27)
---- Diffs:
================================================================
Index: packages/kernel-bare-vserver/kernel-bare-vserver-x86_64.config
diff -u packages/kernel-bare-vserver/kernel-bare-vserver-x86_64.config:1.1.2.25
packages/kernel-bare-vserver/kernel-bare-vserver-x86_64.config:1.1.2.26
--- packages/kernel-bare-vserver/kernel-bare-vserver-x86_64.config:1.1.2.25
Thu Feb 25 14:00:37 2010
+++ packages/kernel-bare-vserver/kernel-bare-vserver-x86_64.config Thu Feb
25 22:46:59 2010
@@ -4596,6 +4596,34 @@
#
# Security options
#
+
+#
+# Grsecurity
+#
+CONFIG_GRKERNSEC=y
+
+#
+# Filesystem Protections
+#
+CONFIG_GRKERNSEC_PROC=y
+# CONFIG_GRKERNSEC_PROC_USER is not set
+CONFIG_GRKERNSEC_PROC_USERGROUP=y
+CONFIG_GRKERNSEC_PROC_GID=17
+CONFIG_GRKERNSEC_PROC_ADD=y
+CONFIG_GRKERNSEC_LINK=y
+CONFIG_GRKERNSEC_FIFO=y
+
+#
+# Other Protections
+#
+CONFIG_GRKERNSEC_PROC_IPADDR=y
+CONFIG_GRKERNSEC_DMESG=y
+
+#
+# Sysctl support
+#
+CONFIG_GRKERNSEC_SYSCTL=y
+# CONFIG_GRKERNSEC_SYSCTL_ON is not set
CONFIG_KEYS=y
# CONFIG_KEYS_DEBUG_PROC_KEYS is not set
CONFIG_SECURITY=y
================================================================
Index: packages/kernel-bare-vserver/kernel-bare-vserver-x86.config
diff -u packages/kernel-bare-vserver/kernel-bare-vserver-x86.config:1.1.2.26
packages/kernel-bare-vserver/kernel-bare-vserver-x86.config:1.1.2.27
--- packages/kernel-bare-vserver/kernel-bare-vserver-x86.config:1.1.2.26
Thu Feb 25 14:00:37 2010
+++ packages/kernel-bare-vserver/kernel-bare-vserver-x86.config Thu Feb 25
22:46:59 2010
@@ -4854,6 +4854,34 @@
#
# Security options
#
+
+#
+# Grsecurity
+#
+CONFIG_GRKERNSEC=y
+
+#
+# Filesystem Protections
+#
+CONFIG_GRKERNSEC_PROC=y
+# CONFIG_GRKERNSEC_PROC_USER is not set
+CONFIG_GRKERNSEC_PROC_USERGROUP=y
+CONFIG_GRKERNSEC_PROC_GID=17
+CONFIG_GRKERNSEC_PROC_ADD=y
+CONFIG_GRKERNSEC_LINK=y
+CONFIG_GRKERNSEC_FIFO=y
+
+#
+# Other Protections
+#
+CONFIG_GRKERNSEC_PROC_IPADDR=y
+CONFIG_GRKERNSEC_DMESG=y
+
+#
+# Sysctl support
+#
+CONFIG_GRKERNSEC_SYSCTL=y
+# CONFIG_GRKERNSEC_SYSCTL_ON is not set
CONFIG_KEYS=y
# CONFIG_KEYS_DEBUG_PROC_KEYS is not set
CONFIG_SECURITY=y
================================================================
---- CVS-web:
http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/packages/kernel-bare-vserver/kernel-bare-vserver-x86_64.config?r1=1.1.2.25&r2=1.1.2.26&f=u
http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/packages/kernel-bare-vserver/kernel-bare-vserver-x86.config?r1=1.1.2.26&r2=1.1.2.27&f=u
_______________________________________________
pld-cvs-commit mailing list
[email protected]
http://lists.pld-linux.org/mailman/listinfo/pld-cvs-commit
