diff options
| author |   Anthony G. Basile <blueness@gentoo.org> | 2011-11-27 20:39:44 -0500 |
|---|---|---|
| committer | Anthony G. Basile <blueness@gentoo.org> | 2011-11-27 20:39:44 -0500 |
| commit | 5db15ffa1575115b4d74bdc68ebaac3cc977ea84 (patch) | |
| tree | 95a17b9fa159d1f6472a92314015e73af51d7d69 /3.1.3/4423_grsec-remove-protected-paths.patch | |
| parent | Grsec/PaX: 2.2.2-{2.6.32.48,3.1.1}-201111201943 (diff) | |
| download | hardened-patchset-5db15ffa1575115b4d74bdc68ebaac3cc977ea84.tar.gz hardened-patchset-5db15ffa1575115b4d74bdc68ebaac3cc977ea84.tar.bz2 hardened-patchset-5db15ffa1575115b4d74bdc68ebaac3cc977ea84.zip | |
Grsec/PaX: 2.2.2-{2.6.32.49,3.1.3}-201111262001.patch20111126
Diffstat (limited to '3.1.3/4423_grsec-remove-protected-paths.patch')
| -rw-r--r-- | 3.1.3/4423_grsec-remove-protected-paths.patch | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/3.1.3/4423_grsec-remove-protected-paths.patch b/3.1.3/4423_grsec-remove-protected-paths.patch new file mode 100644 index 0000000..4afb3e2 --- /dev/null +++ b/3.1.3/4423_grsec-remove-protected-paths.patch @@ -0,0 +1,19 @@ +From: Anthony G. Basile <blueness@gentoo.org> + +We don't want GRSEC's Makefile to change permissions on paths in +the filesystem. + +diff -Naur a/grsecurity/Makefile b/grsecurity/Makefile +--- a/grsecurity/Makefile 2011-10-19 20:42:50.000000000 -0400 ++++ b/grsecurity/Makefile 2011-10-19 20:45:08.000000000 -0400 +@@ -27,10 +27,4 @@ + ifdef CONFIG_GRKERNSEC_HIDESYM + extra-y := grsec_hidesym.o + $(obj)/grsec_hidesym.o: +- @-chmod -f 500 /boot +- @-chmod -f 500 /lib/modules +- @-chmod -f 500 /lib64/modules +- @-chmod -f 500 /lib32/modules +- @-chmod -f 700 . +- @echo ' grsec: protected kernel image paths' + endif |