From a6383ddcf48aac166b64e6008cbceb4476975279 Mon Sep 17 00:00:00 2001 From: "Anthony G. Basile" Date: Sat, 22 Apr 2017 12:08:04 -0400 Subject: grsecurity-3.1-4.9.24-201704220732 --- 4.9.24/0000_README | 56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 56 insertions(+) create mode 100644 4.9.24/0000_README (limited to '4.9.24/0000_README') diff --git a/4.9.24/0000_README b/4.9.24/0000_README new file mode 100644 index 0000000..89862a9 --- /dev/null +++ b/4.9.24/0000_README @@ -0,0 +1,56 @@ +README +----------------------------------------------------------------------------- +Individual Patch Descriptions: +----------------------------------------------------------------------------- +Patch: 1023_linux-4.9.24.patch +From: http://www.kernel.org +Desc: Linux 4.9.24 + +Patch: 4420_grsecurity-3.1-4.9.24-201704220732.patch +From: http://www.grsecurity.net +Desc: hardened-sources base patch from upstream grsecurity + +Patch: 4425_grsec_remove_EI_PAX.patch +From: Anthony G. Basile +Desc: Remove EI_PAX option and force off + +Patch: 4426_default_XATTR_PAX_FLAGS.patch +From: Anthony G. Basile +Desc: Defalut PT_PAX_FLAGS off and XATTR_PAX_FLAGS on + +Patch: 4427_force_XATTR_PAX_tmpfs.patch +From: Anthony G. Basile +Desc: Force XATTR_PAX on tmpfs + +Patch: 4430_grsec-remove-localversion-grsec.patch +From: Kerin Millar +Desc: Removes grsecurity's localversion-grsec file + +Patch: 4435_grsec-mute-warnings.patch +From: Alexander Gabert + Gordon Malm +Desc: Removes verbose compile warning settings from grsecurity, restores + mainline Linux kernel behavior + +Patch: 4440_grsec-remove-protected-paths.patch +From: Anthony G. Basile +Desc: Removes chmod statements from grsecurity/Makefile + +Patch: 4450_grsec-kconfig-default-gids.patch +From: Kerin Millar +Desc: Sets sane(r) default GIDs on various grsecurity group-dependent + features + +Patch: 4465_selinux-avc_audit-log-curr_ip.patch +From: Gordon Malm + Anthony G. Basile +Desc: Configurable option to add src IP address to SELinux log messages + +Patch: 4470_disable-compat_vdso.patch +From: Gordon Malm + Kerin Millar +Desc: Disables VDSO_COMPAT operation completely + +Patch: 4475_emutramp_default_on.patch +From: Anthony G. Basile +Desc: Set PAX_EMUTRAMP default on for libffi, bugs #329499 and #457194 -- cgit v1.2.3-18-g5258