diff options
| author |   Anthony G. Basile <blueness@gentoo.org> | 2012-02-05 12:57:22 -0500 |
|---|---|---|
| committer | Anthony G. Basile <blueness@gentoo.org> | 2012-02-05 12:57:22 -0500 |
| commit | 75455382c3059eef047c91f69b9c93cc9c6641ed (patch) | |
| tree | 21af0031b323307d93c1f3bcff355c909aa2084f | |
| parent | Renumbered patches (diff) | |
| download | hardened-patchset-75455382c3059eef047c91f69b9c93cc9c6641ed.tar.gz hardened-patchset-75455382c3059eef047c91f69b9c93cc9c6641ed.tar.bz2 hardened-patchset-75455382c3059eef047c91f69b9c93cc9c6641ed.zip | |
Added patch to unlock PAX_XATTR_PAX_FLAGS option20120203
| -rw-r--r-- | 2.6.32/0000_README | 4 | ||||
| -rw-r--r-- | 2.6.32/4425_grsec_enable_xtpax.patch | 16 | ||||
| -rw-r--r-- | 3.2.4/0000_README | 4 | ||||
| -rw-r--r-- | 3.2.4/4425_grsec_enable_xtpax.patch | 16 |
4 files changed, 40 insertions, 0 deletions
diff --git a/2.6.32/0000_README b/2.6.32/0000_README index ecd453e..cb858f1 100644 --- a/2.6.32/0000_README +++ b/2.6.32/0000_README @@ -22,6 +22,10 @@ Patch: 4420_grsecurity-2.2.2-2.6.32.56-201202032051.patch From: http://www.grsecurity.net Desc: hardened-sources base patch from upstream grsecurity +Patch: 4425_grsec_enable_xtpax.patch +From: Anthony G. Basile <blueness@gentoo.org> +Desc: Unlock PAX_XATTR_PAX_FLAGS option + Patch: 4430_grsec-remove-localversion-grsec.patch From: Kerin Millar <kerframil@gmail.com> Desc: Removes grsecurity's localversion-grsec file diff --git a/2.6.32/4425_grsec_enable_xtpax.patch b/2.6.32/4425_grsec_enable_xtpax.patch new file mode 100644 index 0000000..9735ecf --- /dev/null +++ b/2.6.32/4425_grsec_enable_xtpax.patch @@ -0,0 +1,16 @@ +From: Anthony G. Basile <blueness@gentoo.org> + +Unlock PAX_XATTR_PAX_FLAGS option + +diff -Naur a/security/Kconfig b/security/Kconfig +--- a/security/Kconfig 2012-02-05 12:24:37.000000000 -0500 ++++ b/security/Kconfig 2012-02-05 12:25:04.000000000 -0500 +@@ -92,7 +92,7 @@ + + config PAX_XATTR_PAX_FLAGS + bool 'Use filesystem extended attributes marking' +- depends on EXPERT ++# depends on EXPERT + select CIFS_XATTR if CIFS + select EXT2_FS_XATTR if EXT2_FS + select EXT3_FS_XATTR if EXT3_FS diff --git a/3.2.4/0000_README b/3.2.4/0000_README index ce0507d..39e914d 100644 --- a/3.2.4/0000_README +++ b/3.2.4/0000_README @@ -14,6 +14,10 @@ Patch: 4420_grsecurity-2.2.2-3.2.4-201202032052.patch From: http://www.grsecurity.net Desc: hardened-sources base patch from upstream grsecurity +Patch: 4425_grsec_enable_xtpax.patch +From: Anthony G. Basile <blueness@gentoo.org> +Desc: Unlock PAX_XATTR_PAX_FLAGS option + Patch: 4430_grsec-remove-localversion-grsec.patch From: Kerin Millar <kerframil@gmail.com> Desc: Removes grsecurity's localversion-grsec file diff --git a/3.2.4/4425_grsec_enable_xtpax.patch b/3.2.4/4425_grsec_enable_xtpax.patch new file mode 100644 index 0000000..9735ecf --- /dev/null +++ b/3.2.4/4425_grsec_enable_xtpax.patch @@ -0,0 +1,16 @@ +From: Anthony G. Basile <blueness@gentoo.org> + +Unlock PAX_XATTR_PAX_FLAGS option + +diff -Naur a/security/Kconfig b/security/Kconfig +--- a/security/Kconfig 2012-02-05 12:24:37.000000000 -0500 ++++ b/security/Kconfig 2012-02-05 12:25:04.000000000 -0500 +@@ -92,7 +92,7 @@ + + config PAX_XATTR_PAX_FLAGS + bool 'Use filesystem extended attributes marking' +- depends on EXPERT ++# depends on EXPERT + select CIFS_XATTR if CIFS + select EXT2_FS_XATTR if EXT2_FS + select EXT3_FS_XATTR if EXT3_FS |