| 1 |
commit: 75455382c3059eef047c91f69b9c93cc9c6641ed |
| 2 |
Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org> |
| 3 |
AuthorDate: Sun Feb 5 17:57:22 2012 +0000 |
| 4 |
Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org> |
| 5 |
CommitDate: Sun Feb 5 17:57:22 2012 +0000 |
| 6 |
URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-patchset.git;a=commit;h=75455382 |
| 7 |
|
| 8 |
Added patch to unlock PAX_XATTR_PAX_FLAGS option |
| 9 |
|
| 10 |
--- |
| 11 |
2.6.32/0000_README | 4 ++++ |
| 12 |
2.6.32/4425_grsec_enable_xtpax.patch | 16 ++++++++++++++++ |
| 13 |
3.2.4/0000_README | 4 ++++ |
| 14 |
3.2.4/4425_grsec_enable_xtpax.patch | 16 ++++++++++++++++ |
| 15 |
4 files changed, 40 insertions(+), 0 deletions(-) |
| 16 |
|
| 17 |
diff --git a/2.6.32/0000_README b/2.6.32/0000_README |
| 18 |
index ecd453e..cb858f1 100644 |
| 19 |
--- a/2.6.32/0000_README |
| 20 |
+++ b/2.6.32/0000_README |
| 21 |
@@ -22,6 +22,10 @@ Patch: 4420_grsecurity-2.2.2-2.6.32.56-201202032051.patch |
| 22 |
From: http://www.grsecurity.net |
| 23 |
Desc: hardened-sources base patch from upstream grsecurity |
| 24 |
|
| 25 |
+Patch: 4425_grsec_enable_xtpax.patch |
| 26 |
+From: Anthony G. Basile <blueness@g.o> |
| 27 |
+Desc: Unlock PAX_XATTR_PAX_FLAGS option |
| 28 |
+ |
| 29 |
Patch: 4430_grsec-remove-localversion-grsec.patch |
| 30 |
From: Kerin Millar <kerframil@×××××.com> |
| 31 |
Desc: Removes grsecurity's localversion-grsec file |
| 32 |
|
| 33 |
diff --git a/2.6.32/4425_grsec_enable_xtpax.patch b/2.6.32/4425_grsec_enable_xtpax.patch |
| 34 |
new file mode 100644 |
| 35 |
index 0000000..9735ecf |
| 36 |
--- /dev/null |
| 37 |
+++ b/2.6.32/4425_grsec_enable_xtpax.patch |
| 38 |
@@ -0,0 +1,16 @@ |
| 39 |
+From: Anthony G. Basile <blueness@g.o> |
| 40 |
+ |
| 41 |
+Unlock PAX_XATTR_PAX_FLAGS option |
| 42 |
+ |
| 43 |
+diff -Naur a/security/Kconfig b/security/Kconfig |
| 44 |
+--- a/security/Kconfig 2012-02-05 12:24:37.000000000 -0500 |
| 45 |
++++ b/security/Kconfig 2012-02-05 12:25:04.000000000 -0500 |
| 46 |
+@@ -92,7 +92,7 @@ |
| 47 |
+ |
| 48 |
+ config PAX_XATTR_PAX_FLAGS |
| 49 |
+ bool 'Use filesystem extended attributes marking' |
| 50 |
+- depends on EXPERT |
| 51 |
++# depends on EXPERT |
| 52 |
+ select CIFS_XATTR if CIFS |
| 53 |
+ select EXT2_FS_XATTR if EXT2_FS |
| 54 |
+ select EXT3_FS_XATTR if EXT3_FS |
| 55 |
|
| 56 |
diff --git a/3.2.4/0000_README b/3.2.4/0000_README |
| 57 |
index ce0507d..39e914d 100644 |
| 58 |
--- a/3.2.4/0000_README |
| 59 |
+++ b/3.2.4/0000_README |
| 60 |
@@ -14,6 +14,10 @@ Patch: 4420_grsecurity-2.2.2-3.2.4-201202032052.patch |
| 61 |
From: http://www.grsecurity.net |
| 62 |
Desc: hardened-sources base patch from upstream grsecurity |
| 63 |
|
| 64 |
+Patch: 4425_grsec_enable_xtpax.patch |
| 65 |
+From: Anthony G. Basile <blueness@g.o> |
| 66 |
+Desc: Unlock PAX_XATTR_PAX_FLAGS option |
| 67 |
+ |
| 68 |
Patch: 4430_grsec-remove-localversion-grsec.patch |
| 69 |
From: Kerin Millar <kerframil@×××××.com> |
| 70 |
Desc: Removes grsecurity's localversion-grsec file |
| 71 |
|
| 72 |
diff --git a/3.2.4/4425_grsec_enable_xtpax.patch b/3.2.4/4425_grsec_enable_xtpax.patch |
| 73 |
new file mode 100644 |
| 74 |
index 0000000..9735ecf |
| 75 |
--- /dev/null |
| 76 |
+++ b/3.2.4/4425_grsec_enable_xtpax.patch |
| 77 |
@@ -0,0 +1,16 @@ |
| 78 |
+From: Anthony G. Basile <blueness@g.o> |
| 79 |
+ |
| 80 |
+Unlock PAX_XATTR_PAX_FLAGS option |
| 81 |
+ |
| 82 |
+diff -Naur a/security/Kconfig b/security/Kconfig |
| 83 |
+--- a/security/Kconfig 2012-02-05 12:24:37.000000000 -0500 |
| 84 |
++++ b/security/Kconfig 2012-02-05 12:25:04.000000000 -0500 |
| 85 |
+@@ -92,7 +92,7 @@ |
| 86 |
+ |
| 87 |
+ config PAX_XATTR_PAX_FLAGS |
| 88 |
+ bool 'Use filesystem extended attributes marking' |
| 89 |
+- depends on EXPERT |
| 90 |
++# depends on EXPERT |
| 91 |
+ select CIFS_XATTR if CIFS |
| 92 |
+ select EXT2_FS_XATTR if EXT2_FS |
| 93 |
+ select EXT3_FS_XATTR if EXT3_FS |
Archives