diff options
| author |   Anthony G. Basile <blueness@gentoo.org> | 2011-10-25 15:52:52 -0400 |
|---|---|---|
| committer | Anthony G. Basile <blueness@gentoo.org> | 2011-10-25 15:52:52 -0400 |
| commit | 739c95151ded3bb81a3eabdee283ec649d53b59f (patch) | |
| tree | aaf715ae6ceb5472054fcc6949ae97ec8fac0285 /2.6.39/4437-grsec-kconfig-proc-user.patch | |
| parent | Add headers (diff) | |
| download | hardened-patchset-739c95151ded3bb81a3eabdee283ec649d53b59f.tar.gz hardened-patchset-739c95151ded3bb81a3eabdee283ec649d53b59f.tar.bz2 hardened-patchset-739c95151ded3bb81a3eabdee283ec649d53b59f.zip | |
Deprecate 2.6.39experimental
Diffstat (limited to '2.6.39/4437-grsec-kconfig-proc-user.patch')
| -rw-r--r-- | 2.6.39/4437-grsec-kconfig-proc-user.patch | 26 |
1 files changed, 0 insertions, 26 deletions
diff --git a/2.6.39/4437-grsec-kconfig-proc-user.patch b/2.6.39/4437-grsec-kconfig-proc-user.patch deleted file mode 100644 index 372507c..0000000 --- a/2.6.39/4437-grsec-kconfig-proc-user.patch +++ /dev/null @@ -1,26 +0,0 @@ -From: Anthony G. Basile <blueness@gentoo.org> - -Address the mutually exclusive options GRKERNSEC_PROC_USER and GRKERNSEC_PROC_USERGROUP -in a different way to avoid bug #366019. This patch should eventually go upstream. - -diff -Naur linux-2.6.39-hardened-r4.orig//grsecurity/Kconfig linux-2.6.39-hardened-r4/grsecurity/Kconfig ---- a/grsecurity/Kconfig 2011-06-29 10:02:56.000000000 -0400 -+++ b/grsecurity/Kconfig 2011-06-29 10:08:07.000000000 -0400 -@@ -670,7 +670,7 @@ - - config GRKERNSEC_PROC_USER - bool "Restrict /proc to user only" -- depends on GRKERNSEC_PROC -+ depends on GRKERNSEC_PROC && !GRKERNSEC_PROC_USERGROUP - help - If you say Y here, non-root users will only be able to view their own - processes, and restricts them from viewing network-related information, -@@ -678,7 +678,7 @@ - - config GRKERNSEC_PROC_USERGROUP - bool "Allow special group" -- depends on GRKERNSEC_PROC && !GRKERNSEC_PROC_USER -+ depends on GRKERNSEC_PROC - help - If you say Y here, you will be able to select a group that will be - able to view all processes and network-related information. If you've |