From 32d29590c6ce81ce2980b20896a9e177f61fc643 Mon Sep 17 00:00:00 2001 From: "Anthony G. Basile" Date: Sun, 20 Nov 2016 12:41:26 -0500 Subject: grsecurity-3.1-4.8.9-201611192033 --- 4.8.9/4440_grsec-remove-protected-paths.patch | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 4.8.9/4440_grsec-remove-protected-paths.patch (limited to '4.8.9/4440_grsec-remove-protected-paths.patch') diff --git a/4.8.9/4440_grsec-remove-protected-paths.patch b/4.8.9/4440_grsec-remove-protected-paths.patch new file mode 100644 index 0000000..741546d --- /dev/null +++ b/4.8.9/4440_grsec-remove-protected-paths.patch @@ -0,0 +1,20 @@ +From: Anthony G. Basile + +We don't want GRSEC's Makefile to change permissions on paths in +the filesystem. + +diff -Naur a/grsecurity/Makefile b/grsecurity/Makefile +--- a/grsecurity/Makefile 2011-10-19 20:42:50.000000000 -0400 ++++ b/grsecurity/Makefile 2011-10-19 20:45:08.000000000 -0400 +@@ -44,11 +44,4 @@ + ifdef CONFIG_GRKERNSEC_HIDESYM + extra-y := grsec_hidesym.o + $(obj)/grsec_hidesym.o: +- @-chmod -f 500 /boot +- @-chmod -f 500 /lib/modules +- @-chmod -f 500 /lib64/modules +- @-chmod -f 500 /lib32/modules +- @-chmod -f 700 . +- @-chmod -f 700 $(objtree) +- @echo ' grsec: protected kernel image paths' + endif -- cgit v1.2.3-65-gdbad