diff options
| author |   Anthony G. Basile <blueness@gentoo.org> | 2012-03-04 09:49:46 -0500 |
|---|---|---|
| committer | Anthony G. Basile <blueness@gentoo.org> | 2012-03-04 09:49:46 -0500 |
| commit | ec8c51cd545a43fca3d89468b7c69872cac8f076 (patch) | |
| tree | 776d82f82df10a6233df02c5596343d1f999da77 /2.6.32/4450_grsec-kconfig-default-gids.patch | |
| parent | Grsec/PaX: 2.9-2.6.32.57-201202251202 + 2.9-3.2.7-201202251203 (diff) | |
| download | hardened-patchset-ec8c51cd545a43fca3d89468b7c69872cac8f076.tar.gz hardened-patchset-ec8c51cd545a43fca3d89468b7c69872cac8f076.tar.bz2 hardened-patchset-ec8c51cd545a43fca3d89468b7c69872cac8f076.zip | |
Grsec/PaX: 2.9-2.6.32.57-201203022148 + 2.9-3.2.9-20120302214820120302
Diffstat (limited to '2.6.32/4450_grsec-kconfig-default-gids.patch')
| -rw-r--r-- | 2.6.32/4450_grsec-kconfig-default-gids.patch | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/2.6.32/4450_grsec-kconfig-default-gids.patch b/2.6.32/4450_grsec-kconfig-default-gids.patch index 763d845..498adb6 100644 --- a/2.6.32/4450_grsec-kconfig-default-gids.patch +++ b/2.6.32/4450_grsec-kconfig-default-gids.patch @@ -12,7 +12,7 @@ from shooting themselves in the foot. diff -Naur a/grsecurity/Kconfig b/grsecurity/Kconfig --- a/grsecurity/Kconfig 2011-12-12 15:11:47.000000000 -0500 +++ b/grsecurity/Kconfig 2011-12-12 15:13:17.000000000 -0500 -@@ -433,7 +433,7 @@ +@@ -439,7 +439,7 @@ config GRKERNSEC_PROC_GID int "GID for special group" depends on GRKERNSEC_PROC_USERGROUP @@ -21,7 +21,7 @@ diff -Naur a/grsecurity/Kconfig b/grsecurity/Kconfig config GRKERNSEC_PROC_ADD bool "Additional restrictions" -@@ -661,7 +661,7 @@ +@@ -667,7 +667,7 @@ config GRKERNSEC_AUDIT_GID int "GID for auditing" depends on GRKERNSEC_AUDIT_GROUP @@ -30,7 +30,7 @@ diff -Naur a/grsecurity/Kconfig b/grsecurity/Kconfig config GRKERNSEC_EXECLOG bool "Exec logging" -@@ -865,7 +865,7 @@ +@@ -871,7 +871,7 @@ config GRKERNSEC_TPE_GID int "GID for untrusted users" depends on GRKERNSEC_TPE && !GRKERNSEC_TPE_INVERT @@ -39,7 +39,7 @@ diff -Naur a/grsecurity/Kconfig b/grsecurity/Kconfig help Setting this GID determines what group TPE restrictions will be *enabled* for. If the sysctl option is enabled, a sysctl option -@@ -874,7 +874,7 @@ +@@ -880,7 +880,7 @@ config GRKERNSEC_TPE_GID int "GID for trusted users" depends on GRKERNSEC_TPE && GRKERNSEC_TPE_INVERT @@ -48,7 +48,7 @@ diff -Naur a/grsecurity/Kconfig b/grsecurity/Kconfig help Setting this GID determines what group TPE restrictions will be *disabled* for. If the sysctl option is enabled, a sysctl option -@@ -947,7 +947,7 @@ +@@ -953,7 +953,7 @@ config GRKERNSEC_SOCKET_ALL_GID int "GID to deny all sockets for" depends on GRKERNSEC_SOCKET_ALL @@ -57,7 +57,7 @@ diff -Naur a/grsecurity/Kconfig b/grsecurity/Kconfig help Here you can choose the GID to disable socket access for. Remember to add the users you want socket access disabled for to the GID -@@ -968,7 +968,7 @@ +@@ -974,7 +974,7 @@ config GRKERNSEC_SOCKET_CLIENT_GID int "GID to deny client sockets for" depends on GRKERNSEC_SOCKET_CLIENT @@ -66,7 +66,7 @@ diff -Naur a/grsecurity/Kconfig b/grsecurity/Kconfig help Here you can choose the GID to disable client socket access for. Remember to add the users you want client socket access disabled for to -@@ -986,7 +986,7 @@ +@@ -992,7 +992,7 @@ config GRKERNSEC_SOCKET_SERVER_GID int "GID to deny server sockets for" depends on GRKERNSEC_SOCKET_SERVER |