[arch-commits] Commit in grsec-common/trunk (05-grsecurity.conf PKGBUILD)

[Daniel Micay]

Date: Thursday, January 29, 2015 @ 02:14:03
  Author: thestinger
Revision: 126718

upgpkg: grsec-common 3-1

add new kernel.grsecurity.chroot_deny_bad_rename option

Modified:
  grsec-common/trunk/05-grsecurity.conf
  grsec-common/trunk/PKGBUILD

+
 05-grsecurity.conf |1 +
 PKGBUILD   |4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

Modified: 05-grsecurity.conf
===
--- 05-grsecurity.conf  2015-01-28 23:48:00 UTC (rev 126717)
+++ 05-grsecurity.conf  2015-01-29 01:14:03 UTC (rev 126718)
@@ -47,6 +47,7 @@
 #
 
 #kernel.grsecurity.chroot_caps = 1
+kernel.grsecurity.chroot_deny_bad_rename = 1
 #kernel.grsecurity.chroot_deny_chmod = 1
 #kernel.grsecurity.chroot_deny_chroot = 1
 kernel.grsecurity.chroot_deny_fchdir = 1

Modified: PKGBUILD
===
--- PKGBUILD2015-01-28 23:48:00 UTC (rev 126717)
+++ PKGBUILD2015-01-29 01:14:03 UTC (rev 126718)
@@ -1,7 +1,7 @@
 # $Id$
 # Maintainer: Daniel Micay danielmi...@gmail.com
 pkgname=grsec-common
-pkgver=2
+pkgver=3
 pkgrel=1
 pkgdesc='Base package for grsecurity kernels'
 arch=(any)
@@ -9,7 +9,7 @@
 license=('GPL2')
 install=$pkgname.install
 source=(05-grsecurity.conf)
-sha1sums=('ff93228668f2200b0785d8e2f09e9122911f0ef3')
+sha1sums=('385b73d64119ba334ef170acbffc4969734cfb33')
 backup=(etc/sysctl.d/05-grsecurity.conf)
 
 package() {

[arch-commits] Commit in grsec-common/trunk (05-grsecurity.conf PKGBUILD)

[Daniel Micay]

Date: Tuesday, October 14, 2014 @ 18:30:57
  Author: thestinger
Revision: 120654

upgpkg: grsec-common 2-1

enable tpe_restrict_all by default since it will only break niche setups

Modified:
  grsec-common/trunk/05-grsecurity.conf
  grsec-common/trunk/PKGBUILD

+
 05-grsecurity.conf |2 +-
 PKGBUILD   |4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

Modified: 05-grsecurity.conf
===
--- 05-grsecurity.conf  2014-10-14 16:27:26 UTC (rev 120653)
+++ 05-grsecurity.conf  2014-10-14 16:30:57 UTC (rev 120654)
@@ -98,7 +98,7 @@
 #kernel.grsecurity.tpe = 1
 kernel.grsecurity.tpe_gid = 200
 #kernel.grsecurity.tpe_invert = 1
-#kernel.grsecurity.tpe_restrict_all = 1
+kernel.grsecurity.tpe_restrict_all = 1
 
 #
 # Network protections

Modified: PKGBUILD
===
--- PKGBUILD2014-10-14 16:27:26 UTC (rev 120653)
+++ PKGBUILD2014-10-14 16:30:57 UTC (rev 120654)
@@ -1,7 +1,7 @@
 # $Id$
 # Maintainer: Daniel Micay danielmi...@gmail.com
 pkgname=grsec-common
-pkgver=1
+pkgver=2
 pkgrel=1
 pkgdesc='Base package for grsecurity kernels'
 arch=(any)
@@ -9,7 +9,7 @@
 license=('GPL2')
 install=$pkgname.install
 source=(05-grsecurity.conf)
-sha1sums=('dc6b38e1c89376b81246588956e3b93f59620822')
+sha1sums=('ff93228668f2200b0785d8e2f09e9122911f0ef3')
 backup=(etc/sysctl.d/05-grsecurity.conf)
 
 package() {