SOURCES (LINUX_2_6): kernel-grsec.config - more options enabled

zbyniu zbyniu at pld-linux.org
Mon Sep 19 13:34:33 CEST 2005


Author: zbyniu                       Date: Mon Sep 19 11:34:33 2005 GMT
Module: SOURCES                       Tag: LINUX_2_6
---- Log message:
- more options enabled

---- Files affected:
SOURCES:
   kernel-grsec.config (1.24.2.2.2.11 -> 1.24.2.2.2.12) 

---- Diffs:

================================================================
Index: SOURCES/kernel-grsec.config
diff -u SOURCES/kernel-grsec.config:1.24.2.2.2.11 SOURCES/kernel-grsec.config:1.24.2.2.2.12
--- SOURCES/kernel-grsec.config:1.24.2.2.2.11	Sun Mar 13 04:33:26 2005
+++ SOURCES/kernel-grsec.config	Mon Sep 19 13:34:27 2005
@@ -50,13 +50,14 @@
 #
 # Kernel Auditing
 #
-# CONFIG_GRKERNSEC_AUDIT_GROUP is not set
-# CONFIG_GRKERNSEC_EXECLOG is not set
+CONFIG_GRKERNSEC_AUDIT_GROUP=y
+CONFIG_GRKERNSEC_AUDIT_GID=1007
+CONFIG_GRKERNSEC_EXECLOG=y
 CONFIG_GRKERNSEC_RESLOG=y
-# CONFIG_GRKERNSEC_CHROOT_EXECLOG is not set
-# CONFIG_GRKERNSEC_AUDIT_CHDIR is not set
-# CONFIG_GRKERNSEC_AUDIT_MOUNT is not set
-# CONFIG_GRKERNSEC_AUDIT_IPC is not set
+CONFIG_GRKERNSEC_CHROOT_EXECLOG=y
+CONFIG_GRKERNSEC_AUDIT_CHDIR=y
+CONFIG_GRKERNSEC_AUDIT_MOUNT=y
+CONFIG_GRKERNSEC_AUDIT_IPC=y
 CONFIG_GRKERNSEC_SIGNAL=y
 CONFIG_GRKERNSEC_FORKFAIL=y
 CONFIG_GRKERNSEC_TIME=y
@@ -70,7 +71,10 @@
 CONFIG_GRKERNSEC_SHM=y
 CONFIG_GRKERNSEC_DMESG=y
 CONFIG_GRKERNSEC_RANDPID=y
-# CONFIG_GRKERNSEC_TPE is not set
+CONFIG_GRKERNSEC_TPE=y
+CONFIG_GRKERNSEC_TPE_ALL=y
+# CONFIG_GRKERNSEC_TPE_INVERT is not set
+CONFIG_GRKERNSEC_TPE_GID=65500
 
 #
 # Network Protections
@@ -95,7 +99,7 @@
 # Logging Options
 #
 CONFIG_GRKERNSEC_FLOODTIME=10
-CONFIG_GRKERNSEC_FLOODBURST=4
+CONFIG_GRKERNSEC_FLOODBURST=10
 
 #
 # PaX
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/SOURCES/kernel-grsec.config?r1=1.24.2.2.2.11&r2=1.24.2.2.2.12&f=u




More information about the pld-cvs-commit mailing list