Gentoo Archives: gentoo-commits

From: "Anthony G. Basile" <blueness@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/grs:desktop-amd64-hardened commit in: scripts/
Date: Sun, 21 Feb 2016 05:01:44
Message-Id: 1456031468.6f6622168aa67fd5eca8bca96a47a358e69c8878.blueness@gentoo
1 commit: 6f6622168aa67fd5eca8bca96a47a358e69c8878
2 Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
3 AuthorDate: Sun Feb 21 05:11:08 2016 +0000
4 Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
5 CommitDate: Sun Feb 21 05:11:08 2016 +0000
6 URL: https://gitweb.gentoo.org/proj/grs.git/commit/?id=6f662216
7
8 kernel-config: tweak 4.4.2, grsec allow ioperm/ioctl
9
10 scripts/kernel-config | 3 +--
11 1 file changed, 1 insertion(+), 2 deletions(-)
12
13 diff --git a/scripts/kernel-config b/scripts/kernel-config
14 index b8b807f..0b25402 100644
15 --- a/scripts/kernel-config
16 +++ b/scripts/kernel-config
17 @@ -8016,7 +8016,7 @@ CONFIG_PAX_LATENT_ENTROPY=y
18 # Memory Protections
19 #
20 CONFIG_GRKERNSEC_KMEM=y
21 -CONFIG_GRKERNSEC_IO=y
22 +# CONFIG_GRKERNSEC_IO is not set
23 CONFIG_GRKERNSEC_BPF_HARDEN=y
24 CONFIG_GRKERNSEC_PERF_HARDEN=y
25 CONFIG_GRKERNSEC_RAND_THREADSTACK=y
26 @@ -8121,7 +8121,6 @@ CONFIG_GRKERNSEC_DENYUSB=y
27 # Sysctl Support
28 #
29 CONFIG_GRKERNSEC_SYSCTL=y
30 -# CONFIG_GRKERNSEC_SYSCTL_DISTRO is not set
31 CONFIG_GRKERNSEC_SYSCTL_ON=y
32
33 #