|
From: Heiko Z. <smi...@us...> - 2004-04-23 15:53:22
|
Update of /cvsroot/devil-linux/build/scripts/config In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv5861/scripts/config Modified Files: config_grsecurity Log Message: various software updates updated grsecurity to v2 Index: config_grsecurity =================================================================== RCS file: /cvsroot/devil-linux/build/scripts/config/config_grsecurity,v retrieving revision 1.11 retrieving revision 1.12 diff -u -d -r1.11 -r1.12 --- config_grsecurity 24 Feb 2004 17:38:38 -0000 1.11 +++ config_grsecurity 23 Apr 2004 15:53:14 -0000 1.12 @@ -1,75 +1,67 @@ -# CONFIG_GRKERNSEC_HIDESYM is not set -# CONFIG_GRKERNSEC_ACL_DEBUG is not set -# CONFIG_GRKERNSEC_ACL_HIDEKERN is not set -# CONFIG_GRKERNSEC_AUDIT_GROUP is not set -# CONFIG_GRKERNSEC_HI is not set -# CONFIG_GRKERNSEC_IO is not set +CONFIG_GRKERNSEC=y # CONFIG_GRKERNSEC_LOW is not set # CONFIG_GRKERNSEC_MID is not set +# CONFIG_GRKERNSEC_HI is not set +CONFIG_GRKERNSEC_CUSTOM=y +# CONFIG_GRKERNSEC_PAX_SOFTMODE is not set +CONFIG_GRKERNSEC_PAX_EI_PAX=y +# CONFIG_GRKERNSEC_PAX_PT_PAX_FLAGS is not set +CONFIG_GRKERNSEC_PAX_NO_ACL_FLAGS=y +# CONFIG_GRKERNSEC_PAX_HAVE_ACL_FLAGS is not set +# CONFIG_GRKERNSEC_PAX_HOOK_ACL_FLAGS is not set # CONFIG_GRKERNSEC_PAX_NOEXEC is not set -# CONFIG_GRKERNSEC_PAX_RANDKSTACK is not set -# CONFIG_GRKERNSEC_PROC_USERGROUP is not set -# CONFIG_GRKERNSEC_SOCKET is not set -# CONFIG_GRKERNSEC_TPE is not set -# CONFIG_GR_DEBUG is not set -# CONFIG_IP_NF_MATCH_STEALTH is not set -CONFIG_GRKERNSEC=y +CONFIG_GRKERNSEC_PAX_ASLR=y +CONFIG_GRKERNSEC_PAX_RANDUSTACK=y +CONFIG_GRKERNSEC_PAX_RANDMMAP=y +CONFIG_GRKERNSEC_KMEM=y +CONFIG_GRKERNSEC_IO=y +CONFIG_GRKERNSEC_PROC_MEMMAP=y +CONFIG_GRKERNSEC_HIDESYM=y +CONFIG_GRKERNSEC_ACL_HIDEKERN=y CONFIG_GRKERNSEC_ACL_MAXTRIES=3 CONFIG_GRKERNSEC_ACL_TIMEOUT=30 -CONFIG_GRKERNSEC_AUDIT_CHDIR=y -CONFIG_GRKERNSEC_AUDIT_IPC=y -CONFIG_GRKERNSEC_AUDIT_MOUNT=y +CONFIG_GRKERNSEC_PROC=y +CONFIG_GRKERNSEC_PROC_USER=y +CONFIG_GRKERNSEC_PROC_ADD=y +CONFIG_GRKERNSEC_LINK=y +CONFIG_GRKERNSEC_FIFO=y CONFIG_GRKERNSEC_CHROOT=y -CONFIG_GRKERNSEC_CHROOT_CAPS=y +CONFIG_GRKERNSEC_CHROOT_MOUNT=y +CONFIG_GRKERNSEC_CHROOT_DOUBLE=y +CONFIG_GRKERNSEC_CHROOT_PIVOT=y CONFIG_GRKERNSEC_CHROOT_CHDIR=y CONFIG_GRKERNSEC_CHROOT_CHMOD=y -CONFIG_GRKERNSEC_CHROOT_DOUBLE=y -CONFIG_GRKERNSEC_CHROOT_EXECLOG=y CONFIG_GRKERNSEC_CHROOT_FCHDIR=y -CONFIG_GRKERNSEC_CHROOT_FINDTASK=y CONFIG_GRKERNSEC_CHROOT_MKNOD=y -CONFIG_GRKERNSEC_CHROOT_MOUNT=y -CONFIG_GRKERNSEC_CHROOT_NICE=y -CONFIG_GRKERNSEC_CHROOT_PIVOT=y CONFIG_GRKERNSEC_CHROOT_SHMAT=y -CONFIG_GRKERNSEC_CHROOT_SYSCTL=y CONFIG_GRKERNSEC_CHROOT_UNIX=y -CONFIG_GRKERNSEC_CUSTOM=y -CONFIG_GRKERNSEC_DMESG=y +CONFIG_GRKERNSEC_CHROOT_FINDTASK=y +CONFIG_GRKERNSEC_CHROOT_NICE=y +CONFIG_GRKERNSEC_CHROOT_SYSCTL=y +CONFIG_GRKERNSEC_CHROOT_CAPS=y +# CONFIG_GRKERNSEC_AUDIT_GROUP is not set CONFIG_GRKERNSEC_EXECLOG=y -CONFIG_GRKERNSEC_EXECVE=y -CONFIG_GRKERNSEC_FIFO=y -CONFIG_GRKERNSEC_FLOODBURST=10 -CONFIG_GRKERNSEC_FLOODTIME=10 +CONFIG_GRKERNSEC_RESLOG=y +CONFIG_GRKERNSEC_CHROOT_EXECLOG=y +CONFIG_GRKERNSEC_AUDIT_CHDIR=y +CONFIG_GRKERNSEC_AUDIT_MOUNT=y +CONFIG_GRKERNSEC_AUDIT_IPC=y CONFIG_GRKERNSEC_FORKFAIL=y -CONFIG_GRKERNSEC_IO=y -CONFIG_GRKERNSEC_KMEM=y -CONFIG_GRKERNSEC_LINK=y -CONFIG_GRKERNSEC_MEM=y -CONFIG_GRKERNSEC_PAX_ASLR=y -CONFIG_GRKERNSEC_PAX_RANDMMAP=y -CONFIG_GRKERNSEC_PAX_RANDUSTACK=y -CONFIG_GRKERNSEC_PROC=y -CONFIG_GRKERNSEC_PROC_ADD=y -CONFIG_GRKERNSEC_PROC_MEMMAP=y -CONFIG_GRKERNSEC_PROC_USER=y -CONFIG_GRKERNSEC_RANDID=y -CONFIG_GRKERNSEC_RANDISN=y -CONFIG_GRKERNSEC_RANDNET=y +CONFIG_GRKERNSEC_TIME=y +CONFIG_GRKERNSEC_PROC_IPADDR=y +CONFIG_GRKERNSEC_AUDIT_TEXTREL=y +CONFIG_GRKERNSEC_EXECVE=y +CONFIG_GRKERNSEC_DMESG=y CONFIG_GRKERNSEC_RANDPID=y -CONFIG_GRKERNSEC_RANDPING=y -CONFIG_GRKERNSEC_RANDRPC=y +# CONFIG_GRKERNSEC_TPE is not set +CONFIG_GRKERNSEC_RANDNET=y +CONFIG_GRKERNSEC_RANDISN=y +CONFIG_GRKERNSEC_RANDID=y CONFIG_GRKERNSEC_RANDSRC=y -CONFIG_GRKERNSEC_RESLOG=y -CONFIG_GRKERNSEC_SIGNAL=yes +CONFIG_GRKERNSEC_RANDRPC=y +# CONFIG_GRKERNSEC_SOCKET is not set CONFIG_GRKERNSEC_SYSCTL=y -CONFIG_GRKERNSEC_TIME=y -CONFIG_GR_MAXTRIES=3 -CONFIG_GR_TIMEOUT=30 -CONFIG_RTC=y -CONFIG_GRKERNSEC_PAX_SOFTMODE=n -CONFIG_GRKERNSEC_PAX_EI_PAX=y -CONFIG_GRKERNSEC_PAX_PT_PAX_FLAGS=n -CONFIG_GRKERNSEC_PAX_NO_ACL_FLAGS=y -# CONFIG_GRKERNSEC_PAX_HAVE_ACL_FLAGS is not set -# CONFIG_GRKERNSEC_PAX_HOOK_ACL_FLAGS is not set +CONFIG_GRKERNSEC_FLOODTIME=10 +CONFIG_GRKERNSEC_FLOODBURST=10 +CONFIG_GRKERNSEC_SIGNAL=y +CONFIG_IP_NF_MATCH_STEALTH=m |