Author: sparky Date: Mon Jun 19 11:29:55 2006 GMT Module: SOURCES Tag: HEAD ---- Log message: - few files added
---- Files affected: SOURCES: kernel-desktop-autoconf.h (NONE -> 1.1) (NEW), kernel-desktop-config.h (NONE -> 1.1) (NEW), kernel-desktop-grsec.config (NONE -> 1.1) (NEW), kernel-desktop-suspend2.config (NONE -> 1.1) (NEW) ---- Diffs: ================================================================ Index: SOURCES/kernel-desktop-autoconf.h diff -u /dev/null SOURCES/kernel-desktop-autoconf.h:1.1 --- /dev/null Mon Jun 19 13:29:55 2006 +++ SOURCES/kernel-desktop-autoconf.h Mon Jun 19 13:29:50 2006 @@ -0,0 +1,2 @@ +#error Runtime kernel config detection not available. +#error Please use the autoconf-up.h or autoconf-smp.h instead. ================================================================ Index: SOURCES/kernel-desktop-config.h diff -u /dev/null SOURCES/kernel-desktop-config.h:1.1 --- /dev/null Mon Jun 19 13:29:55 2006 +++ SOURCES/kernel-desktop-config.h Mon Jun 19 13:29:50 2006 @@ -0,0 +1,6 @@ +#ifndef _LINUX_CONFIG_H +#define _LINUX_CONFIG_H + +#include <linux/autoconf.h> + +#endif ================================================================ Index: SOURCES/kernel-desktop-grsec.config diff -u /dev/null SOURCES/kernel-desktop-grsec.config:1.1 --- /dev/null Mon Jun 19 13:29:55 2006 +++ SOURCES/kernel-desktop-grsec.config Mon Jun 19 13:29:50 2006 @@ -0,0 +1,109 @@ +# +# Grsecurity +# +CONFIG_GRKERNSEC=y +# CONFIG_GRKERNSEC_LOW is not set +# CONFIG_GRKERNSEC_MEDIUM is not set +# CONFIG_GRKERNSEC_HIGH is not set +CONFIG_GRKERNSEC_CUSTOM=y + +# +# Address Space Protection +# +# CONFIG_GRKERNSEC_KMEM is not set +# CONFIG_GRKERNSEC_IO is not set +CONFIG_GRKERNSEC_BRUTE=y +CONFIG_GRKERNSEC_MODSTOP=y +# CONFIG_GRKERNSEC_HIDESYM is not set + +# +# Role Based Access Control Options +# +CONFIG_GRKERNSEC_ACL_HIDEKERN=y +CONFIG_GRKERNSEC_ACL_MAXTRIES=3 +CONFIG_GRKERNSEC_ACL_TIMEOUT=30 + +# +# Filesystem Protections +# +CONFIG_GRKERNSEC_PROC=y +# CONFIG_GRKERNSEC_PROC_USER is not set +CONFIG_GRKERNSEC_PROC_USERGROUP=y +CONFIG_GRKERNSEC_PROC_GID=17 +CONFIG_GRKERNSEC_PROC_ADD=y +CONFIG_GRKERNSEC_LINK=y +CONFIG_GRKERNSEC_FIFO=y +CONFIG_GRKERNSEC_CHROOT=y +CONFIG_GRKERNSEC_CHROOT_MOUNT=y +CONFIG_GRKERNSEC_CHROOT_DOUBLE=y +CONFIG_GRKERNSEC_CHROOT_PIVOT=y +CONFIG_GRKERNSEC_CHROOT_CHDIR=y +CONFIG_GRKERNSEC_CHROOT_CHMOD=y +CONFIG_GRKERNSEC_CHROOT_FCHDIR=y +CONFIG_GRKERNSEC_CHROOT_MKNOD=y +CONFIG_GRKERNSEC_CHROOT_SHMAT=y +CONFIG_GRKERNSEC_CHROOT_UNIX=y +CONFIG_GRKERNSEC_CHROOT_FINDTASK=y +CONFIG_GRKERNSEC_CHROOT_NICE=y +CONFIG_GRKERNSEC_CHROOT_SYSCTL=y +CONFIG_GRKERNSEC_CHROOT_CAPS=y + +# +# Kernel Auditing +# +CONFIG_GRKERNSEC_AUDIT_GROUP=y +CONFIG_GRKERNSEC_AUDIT_GID=1007 +CONFIG_GRKERNSEC_EXECLOG=y +CONFIG_GRKERNSEC_RESLOG=y +CONFIG_GRKERNSEC_CHROOT_EXECLOG=y +CONFIG_GRKERNSEC_AUDIT_CHDIR=y +CONFIG_GRKERNSEC_AUDIT_MOUNT=y +CONFIG_GRKERNSEC_AUDIT_IPC=y +CONFIG_GRKERNSEC_SIGNAL=y +CONFIG_GRKERNSEC_FORKFAIL=y +CONFIG_GRKERNSEC_TIME=y +CONFIG_GRKERNSEC_PROC_IPADDR=y +# CONFIG_GRKERNSEC_AUDIT_TEXTREL is not set + +# +# Executable Protections +# +CONFIG_GRKERNSEC_EXECVE=y +CONFIG_GRKERNSEC_SHM=y +CONFIG_GRKERNSEC_DMESG=y +CONFIG_GRKERNSEC_RANDPID=y +CONFIG_GRKERNSEC_TPE=y +CONFIG_GRKERNSEC_TPE_ALL=y +# CONFIG_GRKERNSEC_TPE_INVERT is not set +CONFIG_GRKERNSEC_TPE_GID=65500 + +# +# Network Protections +# +CONFIG_GRKERNSEC_RANDNET=y +CONFIG_GRKERNSEC_SOCKET=y +CONFIG_GRKERNSEC_SOCKET_ALL=y +CONFIG_GRKERNSEC_SOCKET_ALL_GID=65501 +CONFIG_GRKERNSEC_SOCKET_CLIENT=y +CONFIG_GRKERNSEC_SOCKET_CLIENT_GID=65502 +CONFIG_GRKERNSEC_SOCKET_SERVER=y +CONFIG_GRKERNSEC_SOCKET_SERVER_GID=65503 + +# +# Sysctl support +# +CONFIG_GRKERNSEC_SYSCTL=y +# CONFIG_GRKERNSEC_SYSCTL_ON is not set + +# +# Logging Options +# +CONFIG_GRKERNSEC_FLOODTIME=10 +CONFIG_GRKERNSEC_FLOODBURST=10 + +# +# PaX +# +# CONFIG_PAX is not set + +CONFIG_IP_NF_MATCH_STEALTH=m ================================================================ Index: SOURCES/kernel-desktop-suspend2.config diff -u /dev/null SOURCES/kernel-desktop-suspend2.config:1.1 --- /dev/null Mon Jun 19 13:29:55 2006 +++ SOURCES/kernel-desktop-suspend2.config Mon Jun 19 13:29:50 2006 @@ -0,0 +1,9 @@ +# CONFIG_SUSPEND_DEBUG_PAGEALLOC is not set +CONFIG_SUSPEND2_CRYPTO=y +CONFIG_SUSPEND2=y +CONFIG_SUSPEND2_FILEWRITER=y +CONFIG_SUSPEND2_SWAPWRITER=y +CONFIG_SUSPEND2_DEFAULT_RESUME2="" +CONFIG_SUSPEND2_KEEP_IMAGE=n +CONFIG_CRYPTO_LZF=m +# CONFIG_SOFTWARE_REPLACE_SLEEP is not set ================================================================ _______________________________________________ pld-cvs-commit mailing list [email protected] http://lists.pld-linux.org/mailman/listinfo/pld-cvs-commit
