Update of /cvsroot/devil-linux/build/scripts/config
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv5861/scripts/config
Modified Files:
config_grsecurity
Log Message:
various software updates
updated grsecurity to v2
Index: config_grsecurity
===================================================================
RCS file: /cvsroot/devil-linux/build/scripts/config/config_grsecurity,v
retrieving revision 1.11
retrieving revision 1.12
diff -u -d -r1.11 -r1.12
--- config_grsecurity 24 Feb 2004 17:38:38 -0000 1.11
+++ config_grsecurity 23 Apr 2004 15:53:14 -0000 1.12
@@ -1,75 +1,67 @@
-# CONFIG_GRKERNSEC_HIDESYM is not set
-# CONFIG_GRKERNSEC_ACL_DEBUG is not set
-# CONFIG_GRKERNSEC_ACL_HIDEKERN is not set
-# CONFIG_GRKERNSEC_AUDIT_GROUP is not set
-# CONFIG_GRKERNSEC_HI is not set
-# CONFIG_GRKERNSEC_IO is not set
+CONFIG_GRKERNSEC=y
# CONFIG_GRKERNSEC_LOW is not set
# CONFIG_GRKERNSEC_MID is not set
+# CONFIG_GRKERNSEC_HI is not set
+CONFIG_GRKERNSEC_CUSTOM=y
+# CONFIG_GRKERNSEC_PAX_SOFTMODE is not set
+CONFIG_GRKERNSEC_PAX_EI_PAX=y
+# CONFIG_GRKERNSEC_PAX_PT_PAX_FLAGS is not set
+CONFIG_GRKERNSEC_PAX_NO_ACL_FLAGS=y
+# CONFIG_GRKERNSEC_PAX_HAVE_ACL_FLAGS is not set
+# CONFIG_GRKERNSEC_PAX_HOOK_ACL_FLAGS is not set
# CONFIG_GRKERNSEC_PAX_NOEXEC is not set
-# CONFIG_GRKERNSEC_PAX_RANDKSTACK is not set
-# CONFIG_GRKERNSEC_PROC_USERGROUP is not set
-# CONFIG_GRKERNSEC_SOCKET is not set
-# CONFIG_GRKERNSEC_TPE is not set
-# CONFIG_GR_DEBUG is not set
-# CONFIG_IP_NF_MATCH_STEALTH is not set
-CONFIG_GRKERNSEC=y
+CONFIG_GRKERNSEC_PAX_ASLR=y
+CONFIG_GRKERNSEC_PAX_RANDUSTACK=y
+CONFIG_GRKERNSEC_PAX_RANDMMAP=y
+CONFIG_GRKERNSEC_KMEM=y
+CONFIG_GRKERNSEC_IO=y
+CONFIG_GRKERNSEC_PROC_MEMMAP=y
+CONFIG_GRKERNSEC_HIDESYM=y
+CONFIG_GRKERNSEC_ACL_HIDEKERN=y
CONFIG_GRKERNSEC_ACL_MAXTRIES=3
CONFIG_GRKERNSEC_ACL_TIMEOUT=30
-CONFIG_GRKERNSEC_AUDIT_CHDIR=y
-CONFIG_GRKERNSEC_AUDIT_IPC=y
-CONFIG_GRKERNSEC_AUDIT_MOUNT=y
+CONFIG_GRKERNSEC_PROC=y
+CONFIG_GRKERNSEC_PROC_USER=y
+CONFIG_GRKERNSEC_PROC_ADD=y
+CONFIG_GRKERNSEC_LINK=y
+CONFIG_GRKERNSEC_FIFO=y
CONFIG_GRKERNSEC_CHROOT=y
-CONFIG_GRKERNSEC_CHROOT_CAPS=y
+CONFIG_GRKERNSEC_CHROOT_MOUNT=y
+CONFIG_GRKERNSEC_CHROOT_DOUBLE=y
+CONFIG_GRKERNSEC_CHROOT_PIVOT=y
CONFIG_GRKERNSEC_CHROOT_CHDIR=y
CONFIG_GRKERNSEC_CHROOT_CHMOD=y
-CONFIG_GRKERNSEC_CHROOT_DOUBLE=y
-CONFIG_GRKERNSEC_CHROOT_EXECLOG=y
CONFIG_GRKERNSEC_CHROOT_FCHDIR=y
-CONFIG_GRKERNSEC_CHROOT_FINDTASK=y
CONFIG_GRKERNSEC_CHROOT_MKNOD=y
-CONFIG_GRKERNSEC_CHROOT_MOUNT=y
-CONFIG_GRKERNSEC_CHROOT_NICE=y
-CONFIG_GRKERNSEC_CHROOT_PIVOT=y
CONFIG_GRKERNSEC_CHROOT_SHMAT=y
-CONFIG_GRKERNSEC_CHROOT_SYSCTL=y
CONFIG_GRKERNSEC_CHROOT_UNIX=y
-CONFIG_GRKERNSEC_CUSTOM=y
-CONFIG_GRKERNSEC_DMESG=y
+CONFIG_GRKERNSEC_CHROOT_FINDTASK=y
+CONFIG_GRKERNSEC_CHROOT_NICE=y
+CONFIG_GRKERNSEC_CHROOT_SYSCTL=y
+CONFIG_GRKERNSEC_CHROOT_CAPS=y
+# CONFIG_GRKERNSEC_AUDIT_GROUP is not set
CONFIG_GRKERNSEC_EXECLOG=y
-CONFIG_GRKERNSEC_EXECVE=y
-CONFIG_GRKERNSEC_FIFO=y
-CONFIG_GRKERNSEC_FLOODBURST=10
-CONFIG_GRKERNSEC_FLOODTIME=10
+CONFIG_GRKERNSEC_RESLOG=y
+CONFIG_GRKERNSEC_CHROOT_EXECLOG=y
+CONFIG_GRKERNSEC_AUDIT_CHDIR=y
+CONFIG_GRKERNSEC_AUDIT_MOUNT=y
+CONFIG_GRKERNSEC_AUDIT_IPC=y
CONFIG_GRKERNSEC_FORKFAIL=y
-CONFIG_GRKERNSEC_IO=y
-CONFIG_GRKERNSEC_KMEM=y
-CONFIG_GRKERNSEC_LINK=y
-CONFIG_GRKERNSEC_MEM=y
-CONFIG_GRKERNSEC_PAX_ASLR=y
-CONFIG_GRKERNSEC_PAX_RANDMMAP=y
-CONFIG_GRKERNSEC_PAX_RANDUSTACK=y
-CONFIG_GRKERNSEC_PROC=y
-CONFIG_GRKERNSEC_PROC_ADD=y
-CONFIG_GRKERNSEC_PROC_MEMMAP=y
-CONFIG_GRKERNSEC_PROC_USER=y
-CONFIG_GRKERNSEC_RANDID=y
-CONFIG_GRKERNSEC_RANDISN=y
-CONFIG_GRKERNSEC_RANDNET=y
+CONFIG_GRKERNSEC_TIME=y
+CONFIG_GRKERNSEC_PROC_IPADDR=y
+CONFIG_GRKERNSEC_AUDIT_TEXTREL=y
+CONFIG_GRKERNSEC_EXECVE=y
+CONFIG_GRKERNSEC_DMESG=y
CONFIG_GRKERNSEC_RANDPID=y
-CONFIG_GRKERNSEC_RANDPING=y
-CONFIG_GRKERNSEC_RANDRPC=y
+# CONFIG_GRKERNSEC_TPE is not set
+CONFIG_GRKERNSEC_RANDNET=y
+CONFIG_GRKERNSEC_RANDISN=y
+CONFIG_GRKERNSEC_RANDID=y
CONFIG_GRKERNSEC_RANDSRC=y
-CONFIG_GRKERNSEC_RESLOG=y
-CONFIG_GRKERNSEC_SIGNAL=yes
+CONFIG_GRKERNSEC_RANDRPC=y
+# CONFIG_GRKERNSEC_SOCKET is not set
CONFIG_GRKERNSEC_SYSCTL=y
-CONFIG_GRKERNSEC_TIME=y
-CONFIG_GR_MAXTRIES=3
-CONFIG_GR_TIMEOUT=30
-CONFIG_RTC=y
-CONFIG_GRKERNSEC_PAX_SOFTMODE=n
-CONFIG_GRKERNSEC_PAX_EI_PAX=y
-CONFIG_GRKERNSEC_PAX_PT_PAX_FLAGS=n
-CONFIG_GRKERNSEC_PAX_NO_ACL_FLAGS=y
-# CONFIG_GRKERNSEC_PAX_HAVE_ACL_FLAGS is not set
-# CONFIG_GRKERNSEC_PAX_HOOK_ACL_FLAGS is not set
+CONFIG_GRKERNSEC_FLOODTIME=10
+CONFIG_GRKERNSEC_FLOODBURST=10
+CONFIG_GRKERNSEC_SIGNAL=y
+CONFIG_IP_NF_MATCH_STEALTH=m
|
