SOURCES (Titanium): kernel-bare-vserver-i386.config, kernel-bare-v...

hawk hawk at pld-linux.org
Sun Nov 11 00:38:01 CET 2007


Author: hawk                         Date: Sat Nov 10 23:38:01 2007 GMT
Module: SOURCES                       Tag: Titanium
---- Log message:
- added minimal grsecurity config values

---- Files affected:
SOURCES:
   kernel-bare-vserver-i386.config (1.1.2.1 -> 1.1.2.2) , kernel-bare-vserver-x86_64.config (1.1.2.1 -> 1.1.2.2) 

---- Diffs:

================================================================
Index: SOURCES/kernel-bare-vserver-i386.config
diff -u SOURCES/kernel-bare-vserver-i386.config:1.1.2.1 SOURCES/kernel-bare-vserver-i386.config:1.1.2.2
--- SOURCES/kernel-bare-vserver-i386.config:1.1.2.1	Sat Nov 10 23:57:05 2007
+++ SOURCES/kernel-bare-vserver-i386.config	Sun Nov 11 00:37:56 2007
@@ -3810,6 +3810,26 @@
 #
 # Security options
 #
+
+#
+# Grsecurity
+#
+CONFIG_GRKERNSEC=y
+
+#
+# Filesystem Protections
+#
+CONFIG_GRKERNSEC_PROC=y
+# CONFIG_GRKERNSEC_PROC_USER is not set
+CONFIG_GRKERNSEC_PROC_USERGROUP=y
+CONFIG_GRKERNSEC_PROC_GID=17
+CONFIG_GRKERNSEC_PROC_ADD=y
+CONFIG_GRKERNSEC_LINK=y
+CONFIG_GRKERNSEC_FIFO=y
+CONFIG_GRKERNSEC_PROC_IPADDR=y
+CONFIG_GRKERNSEC_SHM=y
+CONFIG_GRKERNSEC_SYSCTL=y
+# CONFIG_GRKERNSEC_SYSCTL_ON is not set
 CONFIG_KEYS=y
 # CONFIG_KEYS_DEBUG_PROC_KEYS is not set
 CONFIG_SECURITY=y

================================================================
Index: SOURCES/kernel-bare-vserver-x86_64.config
diff -u SOURCES/kernel-bare-vserver-x86_64.config:1.1.2.1 SOURCES/kernel-bare-vserver-x86_64.config:1.1.2.2
--- SOURCES/kernel-bare-vserver-x86_64.config:1.1.2.1	Sun Nov 11 00:25:37 2007
+++ SOURCES/kernel-bare-vserver-x86_64.config	Sun Nov 11 00:37:56 2007
@@ -3480,6 +3480,26 @@
 #
 # Security options
 #
+
+#
+# Grsecurity
+#
+CONFIG_GRKERNSEC=y
+
+#
+# Filesystem Protections
+#
+CONFIG_GRKERNSEC_PROC=y
+# CONFIG_GRKERNSEC_PROC_USER is not set
+CONFIG_GRKERNSEC_PROC_USERGROUP=y
+CONFIG_GRKERNSEC_PROC_GID=17
+CONFIG_GRKERNSEC_PROC_ADD=y
+CONFIG_GRKERNSEC_LINK=y
+CONFIG_GRKERNSEC_FIFO=y
+CONFIG_GRKERNSEC_PROC_IPADDR=y
+CONFIG_GRKERNSEC_SHM=y
+CONFIG_GRKERNSEC_SYSCTL=y
+# CONFIG_GRKERNSEC_SYSCTL_ON is not set
 CONFIG_KEYS=y
 # CONFIG_KEYS_DEBUG_PROC_KEYS is not set
 CONFIG_SECURITY=y
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/SOURCES/kernel-bare-vserver-i386.config?r1=1.1.2.1&r2=1.1.2.2&f=u
    http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/SOURCES/kernel-bare-vserver-x86_64.config?r1=1.1.2.1&r2=1.1.2.2&f=u



More information about the pld-cvs-commit mailing list