summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAnthony G. Basile <blueness@gentoo.org>2013-12-21 11:14:53 -0500
committerAnthony G. Basile <blueness@gentoo.org>2013-12-21 11:14:53 -0500
commitb537c899f6cb0b9bc6f2c1fb6ba1dc254cc224b0 (patch)
treec36fa2c89e6495cd83f29b5e890cd1c8136555bc /3.12.6/4425_grsec_remove_EI_PAX.patch
parentGrsec/PaX: 3.0-{3.2.53,3.12.5}-201312151212 (diff)
downloadhardened-patchset-20131221.tar.gz
hardened-patchset-20131221.tar.bz2
hardened-patchset-20131221.zip
Grsec/PaX: 3.0-{3.2.53,3.12.6}-20131221093120131221
Diffstat (limited to '3.12.6/4425_grsec_remove_EI_PAX.patch')
-rw-r--r--3.12.6/4425_grsec_remove_EI_PAX.patch19
1 files changed, 19 insertions, 0 deletions
diff --git a/3.12.6/4425_grsec_remove_EI_PAX.patch b/3.12.6/4425_grsec_remove_EI_PAX.patch
new file mode 100644
index 0000000..cf65d90
--- /dev/null
+++ b/3.12.6/4425_grsec_remove_EI_PAX.patch
@@ -0,0 +1,19 @@
+From: Anthony G. Basile <blueness@gentoo.org>
+
+Deprecate EI_PAX.
+
+X-Gentoo-Bug: 445600
+X-Gentoo-Bug-URL: https://bugs.gentoo.org/445600
+
+diff -Nuar linux-3.7.1-hardened.orig/security/Kconfig linux-3.7.1-hardened/security/Kconfig
+--- linux-3.7.1-hardened.orig/security/Kconfig 2012-12-26 08:39:29.000000000 -0500
++++ linux-3.7.1-hardened/security/Kconfig 2012-12-26 09:05:44.000000000 -0500
+@@ -267,7 +267,7 @@
+
+ config PAX_EI_PAX
+ bool 'Use legacy ELF header marking'
+- default y if GRKERNSEC_CONFIG_AUTO
++ depends on BROKEN
+ help
+ Enabling this option will allow you to control PaX features on
+ a per executable basis via the 'chpax' utility available at