From a6383ddcf48aac166b64e6008cbceb4476975279 Mon Sep 17 00:00:00 2001 From: "Anthony G. Basile" Date: Sat, 22 Apr 2017 12:08:04 -0400 Subject: grsecurity-3.1-4.9.24-201704220732 --- 4.9.24/4425_grsec_remove_EI_PAX.patch | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 4.9.24/4425_grsec_remove_EI_PAX.patch (limited to '4.9.24/4425_grsec_remove_EI_PAX.patch') diff --git a/4.9.24/4425_grsec_remove_EI_PAX.patch b/4.9.24/4425_grsec_remove_EI_PAX.patch new file mode 100644 index 0000000..594598a --- /dev/null +++ b/4.9.24/4425_grsec_remove_EI_PAX.patch @@ -0,0 +1,19 @@ +From: Anthony G. Basile + +Deprecate EI_PAX. + +X-Gentoo-Bug: 445600 +X-Gentoo-Bug-URL: https://bugs.gentoo.org/445600 + +diff -Nuar linux-3.7.1-hardened.orig/security/Kconfig linux-3.7.1-hardened/security/Kconfig +--- linux-3.7.1-hardened.orig/security/Kconfig 2012-12-26 08:39:29.000000000 -0500 ++++ linux-3.7.1-hardened/security/Kconfig 2012-12-26 09:05:44.000000000 -0500 +@@ -274,7 +274,7 @@ + + config PAX_EI_PAX + bool 'Use legacy ELF header marking' +- default y if GRKERNSEC_CONFIG_AUTO ++ depends on BROKEN + help + Enabling this option will allow you to control PaX features on + a per executable basis via the 'chpax' utility available at -- cgit v1.2.3-65-gdbad