summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAnthony G. Basile <blueness@gentoo.org>2016-11-24 12:44:41 -0500
committerAnthony G. Basile <blueness@gentoo.org>2016-11-24 12:44:41 -0500
commit7d4591eb9d0207103e8f6a046c2aba99e1dc8862 (patch)
treedc5f3fc462ffc983b95aac7267f7fca31e3df93b /4.8.10/4440_grsec-remove-protected-paths.patch
parentFix 4.8.9/1008_linux-4.8.9.patch (diff)
downloadhardened-patchset-7d4591eb9d0207103e8f6a046c2aba99e1dc8862.tar.gz
hardened-patchset-7d4591eb9d0207103e8f6a046c2aba99e1dc8862.tar.bz2
hardened-patchset-7d4591eb9d0207103e8f6a046c2aba99e1dc8862.zip
grsecurity-3.1-4.8.10-20161123221320161123
Diffstat (limited to '4.8.10/4440_grsec-remove-protected-paths.patch')
-rw-r--r--4.8.10/4440_grsec-remove-protected-paths.patch20
1 files changed, 20 insertions, 0 deletions
diff --git a/4.8.10/4440_grsec-remove-protected-paths.patch b/4.8.10/4440_grsec-remove-protected-paths.patch
new file mode 100644
index 0000000..741546d
--- /dev/null
+++ b/4.8.10/4440_grsec-remove-protected-paths.patch
@@ -0,0 +1,20 @@
+From: Anthony G. Basile <blueness@gentoo.org>
+
+We don't want GRSEC's Makefile to change permissions on paths in
+the filesystem.
+
+diff -Naur a/grsecurity/Makefile b/grsecurity/Makefile
+--- a/grsecurity/Makefile 2011-10-19 20:42:50.000000000 -0400
++++ b/grsecurity/Makefile 2011-10-19 20:45:08.000000000 -0400
+@@ -44,11 +44,4 @@
+ ifdef CONFIG_GRKERNSEC_HIDESYM
+ extra-y := grsec_hidesym.o
+ $(obj)/grsec_hidesym.o:
+- @-chmod -f 500 /boot
+- @-chmod -f 500 /lib/modules
+- @-chmod -f 500 /lib64/modules
+- @-chmod -f 500 /lib32/modules
+- @-chmod -f 700 .
+- @-chmod -f 700 $(objtree)
+- @echo ' grsec: protected kernel image paths'
+ endif