README ----------------------------------------------------------------------------- Individual Patch Descriptions: ----------------------------------------------------------------------------- Patch: 1052_linux-2.6.32.53.patch From: http://www.kernel.org Desc: Linux 2.6.32.53 Patch: 1053_linux-2.6.32.54.patch From: http://www.kernel.org Desc: Linux 2.6.32.54 Patch: 1054_linux-2.6.32.55.patch From: http://www.kernel.org Desc: Linux 2.6.32.55 Patch: 1055_linux-2.6.32.56.patch From: http://www.kernel.org Desc: Linux 2.6.32.56 Patch: 1056_linux-2.6.32.57.patch From: http://www.kernel.org Desc: Linux 2.6.32.57 Patch: 4420_grsecurity-2.9-2.6.32.57-201203022148.patch From: http://www.grsecurity.net Desc: hardened-sources base patch from upstream grsecurity Patch: 4425_grsec_enable_xtpax.patch From: Anthony G. Basile Desc: Unlock PAX_XATTR_PAX_FLAGS option Patch: 4430_grsec-remove-localversion-grsec.patch From: Kerin Millar Desc: Removes grsecurity's localversion-grsec file Patch: 4435_grsec-mute-warnings.patch From: Alexander Gabert Gordon Malm Desc: Removes verbose compile warning settings from grsecurity, restores mainline Linux kernel behavior Patch: 4440_grsec-remove-protected-paths.patch From: Anthony G. Basile Desc: Removes chmod statements from grsecurity/Makefile Patch: 4445_grsec-pax-without-grsec.patch From: Gordon Malm Desc: Allows PaX features to be selected without enabling GRKERNSEC Patch: 4450_grsec-kconfig-default-gids.patch From: Kerin Millar Desc: Sets sane(r) default GIDs on various grsecurity group-dependent features Patch: 4455_grsec-kconfig-gentoo.patch From: Gordon Malm Kerin Millar Anthony G. Basile Desc: Adds Hardened Gentoo [server/workstation/virtualization] security levels, sets Hardened Gentoo [workstation] as default Patch: 4460-grsec-kconfig-proc-user.patch From: Anthony G. Basile Desc: Make GRKERNSEC_PROC_USER, and GRKERNSEC_PROC_USERGROUP mutually exclusive to avoid bug #366019. Patch: 4465_selinux-avc_audit-log-curr_ip.patch From: Gordon Malm Anthony G. Basile Desc: Configurable option to add src IP address to SELinux log messages Patch: 4470_disable-compat_vdso.patch From: Gordon Malm Kerin Millar Desc: Disables VDSO_COMPAT operation completely Patch: 4475_check_ssp_fix.patch From: Magnus Granberg Desc: Fixes kernel check script for ssp