packages (Titanium): kernel-bare-vserver/kernel-bare-vserver-x86_64.config, ...

[hawk]

Author: hawk                         Date: Thu Feb 25 21:47:04 2010 GMT
Module: packages                      Tag: Titanium
---- Log message:
- re-added grsecurity options

---- Files affected:
packages/kernel-bare-vserver:
   kernel-bare-vserver-x86_64.config (1.1.2.25 -> 1.1.2.26) , kernel-bare-vserver-x86.config (1.1.2.26 -> 1.1.2.27) 

---- Diffs:

================================================================
Index: packages/kernel-bare-vserver/kernel-bare-vserver-x86_64.config
diff -u packages/kernel-bare-vserver/kernel-bare-vserver-x86_64.config:1.1.2.25 packages/kernel-bare-vserver/kernel-bare-vserver-x86_64.config:1.1.2.26
--- packages/kernel-bare-vserver/kernel-bare-vserver-x86_64.config:1.1.2.25	Thu Feb 25 14:00:37 2010
+++ packages/kernel-bare-vserver/kernel-bare-vserver-x86_64.config	Thu Feb 25 22:46:59 2010
@@ -4596,6 +4596,34 @@
 #
 # Security options
 #
+
+#
+# Grsecurity
+#
+CONFIG_GRKERNSEC=y
+
+#
+# Filesystem Protections
+#
+CONFIG_GRKERNSEC_PROC=y
+# CONFIG_GRKERNSEC_PROC_USER is not set
+CONFIG_GRKERNSEC_PROC_USERGROUP=y
+CONFIG_GRKERNSEC_PROC_GID=17
+CONFIG_GRKERNSEC_PROC_ADD=y
+CONFIG_GRKERNSEC_LINK=y
+CONFIG_GRKERNSEC_FIFO=y
+
+#
+# Other Protections
+#
+CONFIG_GRKERNSEC_PROC_IPADDR=y
+CONFIG_GRKERNSEC_DMESG=y
+
+#
+# Sysctl support
+#
+CONFIG_GRKERNSEC_SYSCTL=y
+# CONFIG_GRKERNSEC_SYSCTL_ON is not set
 CONFIG_KEYS=y
 # CONFIG_KEYS_DEBUG_PROC_KEYS is not set
 CONFIG_SECURITY=y

================================================================
Index: packages/kernel-bare-vserver/kernel-bare-vserver-x86.config
diff -u packages/kernel-bare-vserver/kernel-bare-vserver-x86.config:1.1.2.26 packages/kernel-bare-vserver/kernel-bare-vserver-x86.config:1.1.2.27
--- packages/kernel-bare-vserver/kernel-bare-vserver-x86.config:1.1.2.26	Thu Feb 25 14:00:37 2010
+++ packages/kernel-bare-vserver/kernel-bare-vserver-x86.config	Thu Feb 25 22:46:59 2010
@@ -4854,6 +4854,34 @@
 #
 # Security options
 #
+
+#
+# Grsecurity
+#
+CONFIG_GRKERNSEC=y
+
+#
+# Filesystem Protections
+#
+CONFIG_GRKERNSEC_PROC=y
+# CONFIG_GRKERNSEC_PROC_USER is not set
+CONFIG_GRKERNSEC_PROC_USERGROUP=y
+CONFIG_GRKERNSEC_PROC_GID=17
+CONFIG_GRKERNSEC_PROC_ADD=y
+CONFIG_GRKERNSEC_LINK=y
+CONFIG_GRKERNSEC_FIFO=y
+
+#
+# Other Protections
+#
+CONFIG_GRKERNSEC_PROC_IPADDR=y
+CONFIG_GRKERNSEC_DMESG=y
+
+#
+# Sysctl support
+#
+CONFIG_GRKERNSEC_SYSCTL=y
+# CONFIG_GRKERNSEC_SYSCTL_ON is not set
 CONFIG_KEYS=y
 # CONFIG_KEYS_DEBUG_PROC_KEYS is not set
 CONFIG_SECURITY=y
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/packages/kernel-bare-vserver/kernel-bare-vserver-x86_64.config?r1=1.1.2.25&r2=1.1.2.26&f=u
    http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/packages/kernel-bare-vserver/kernel-bare-vserver-x86.config?r1=1.1.2.26&r2=1.1.2.27&f=u