| 1 |
commit: 2876b4f7804e7cc1ceec65644c5edac00f00d33e |
| 2 |
Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org> |
| 3 |
AuthorDate: Sun Jul 1 18:00:42 2012 +0000 |
| 4 |
Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org> |
| 5 |
CommitDate: Sun Jul 1 18:00:42 2012 +0000 |
| 6 |
URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-patchset.git;a=commit;h=2876b4f7 |
| 7 |
|
| 8 |
Grsec/PaX: 2.9.1-3.2.21-201206251800 |
| 9 |
|
| 10 |
--- |
| 11 |
3.2.21/0000_README | 2 +- |
| 12 |
...420_grsecurity-2.9.1-3.2.21-201206251800.patch} | 11 ++++++++++- |
| 13 |
2 files changed, 11 insertions(+), 2 deletions(-) |
| 14 |
|
| 15 |
diff --git a/3.2.21/0000_README b/3.2.21/0000_README |
| 16 |
index ebad4be..cbca5ca 100644 |
| 17 |
--- a/3.2.21/0000_README |
| 18 |
+++ b/3.2.21/0000_README |
| 19 |
@@ -2,7 +2,7 @@ README |
| 20 |
----------------------------------------------------------------------------- |
| 21 |
Individual Patch Descriptions: |
| 22 |
----------------------------------------------------------------------------- |
| 23 |
-Patch: 4420_grsecurity-2.9.1-3.2.21-201206221855.patch |
| 24 |
+Patch: 4420_grsecurity-2.9.1-3.2.21-201206251800.patch |
| 25 |
From: http://www.grsecurity.net |
| 26 |
Desc: hardened-sources base patch from upstream grsecurity |
| 27 |
|
| 28 |
|
| 29 |
diff --git a/3.2.21/4420_grsecurity-2.9.1-3.2.21-201206221855.patch b/3.2.21/4420_grsecurity-2.9.1-3.2.21-201206251800.patch |
| 30 |
similarity index 99% |
| 31 |
rename from 3.2.21/4420_grsecurity-2.9.1-3.2.21-201206221855.patch |
| 32 |
rename to 3.2.21/4420_grsecurity-2.9.1-3.2.21-201206251800.patch |
| 33 |
index cf14807..035c952 100644 |
| 34 |
--- a/3.2.21/4420_grsecurity-2.9.1-3.2.21-201206221855.patch |
| 35 |
+++ b/3.2.21/4420_grsecurity-2.9.1-3.2.21-201206251800.patch |
| 36 |
@@ -7802,7 +7802,7 @@ index e3ca7e0..b30b28a 100644 |
| 37 |
config X86_MINIMUM_CPU_FAMILY |
| 38 |
int |
| 39 |
diff --git a/arch/x86/Kconfig.debug b/arch/x86/Kconfig.debug |
| 40 |
-index bf56e17..05f9891 100644 |
| 41 |
+index bf56e17..91465a1 100644 |
| 42 |
--- a/arch/x86/Kconfig.debug |
| 43 |
+++ b/arch/x86/Kconfig.debug |
| 44 |
@@ -81,7 +81,7 @@ config X86_PTDUMP |
| 45 |
@@ -7823,6 +7823,15 @@ index bf56e17..05f9891 100644 |
| 46 |
---help--- |
| 47 |
This option helps catch unintended modifications to loadable |
| 48 |
kernel module's text and read-only data. It also prevents execution |
| 49 |
+@@ -272,7 +272,7 @@ config OPTIMIZE_INLINING |
| 50 |
+ |
| 51 |
+ config DEBUG_STRICT_USER_COPY_CHECKS |
| 52 |
+ bool "Strict copy size checks" |
| 53 |
+- depends on DEBUG_KERNEL && !TRACE_BRANCH_PROFILING |
| 54 |
++ depends on DEBUG_KERNEL && !TRACE_BRANCH_PROFILING && !PAX_SIZE_OVERFLOW |
| 55 |
+ ---help--- |
| 56 |
+ Enabling this option turns a certain set of sanity checks for user |
| 57 |
+ copy operations into compile time failures. |
| 58 |
diff --git a/arch/x86/Makefile b/arch/x86/Makefile |
| 59 |
index 03dbc7f5b..4d12eea 100644 |
| 60 |
--- a/arch/x86/Makefile |
Archives