Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 55c55
- < CONFIG_LOCALVERSION="-grsec"
- ---
- > CONFIG_LOCALVERSION="-ARCH"
- 867d866
- < CONFIG_NETFILTER_XT_MATCH_GRADM=m
- 5236,5238c5235
- < CONFIG_JFFS2_FS_XATTR=y
- < CONFIG_JFFS2_FS_POSIX_ACL=y
- < CONFIG_JFFS2_FS_SECURITY=y
- ---
- > # CONFIG_JFFS2_FS_XATTR is not set
- 5560,5713d5556
- <
- < #
- < # Grsecurity
- < #
- < CONFIG_TASK_SIZE_MAX_SHIFT=47
- < CONFIG_PAX_USERCOPY_SLABS=y
- < CONFIG_GRKERNSEC=y
- < # CONFIG_GRKERNSEC_CONFIG_AUTO is not set
- < CONFIG_GRKERNSEC_CONFIG_CUSTOM=y
- < CONFIG_GRKERNSEC_PROC_GID=9998
- < CONFIG_GRKERNSEC_TPE_TRUSTED_GID=9999
- < CONFIG_GRKERNSEC_SYMLINKOWN_GID=33
- <
- < #
- < # Customize Configuration
- < #
- <
- < #
- < # PaX
- < #
- < CONFIG_PAX=y
- <
- < #
- < # PaX Control
- < #
- < # CONFIG_PAX_SOFTMODE is not set
- < # CONFIG_PAX_EI_PAX is not set
- < CONFIG_PAX_PT_PAX_FLAGS=y
- < CONFIG_PAX_XATTR_PAX_FLAGS=y
- < # CONFIG_PAX_NO_ACL_FLAGS is not set
- < CONFIG_PAX_HAVE_ACL_FLAGS=y
- < # CONFIG_PAX_HOOK_ACL_FLAGS is not set
- <
- < #
- < # Non-executable pages
- < #
- < CONFIG_PAX_NOEXEC=y
- < CONFIG_PAX_PAGEEXEC=y
- < CONFIG_PAX_EMUTRAMP=y
- < CONFIG_PAX_MPROTECT=y
- < # CONFIG_PAX_MPROTECT_COMPAT is not set
- < # CONFIG_PAX_ELFRELOCS is not set
- < CONFIG_PAX_KERNEXEC_PLUGIN_METHOD=""
- <
- < #
- < # Address Space Layout Randomization
- < #
- < CONFIG_PAX_ASLR=y
- < CONFIG_PAX_RANDKSTACK=y
- < CONFIG_PAX_RANDUSTACK=y
- < CONFIG_PAX_RANDMMAP=y
- <
- < #
- < # Miscellaneous hardening features
- < #
- < CONFIG_PAX_MEMORY_STACKLEAK=y
- < CONFIG_PAX_REFCOUNT=y
- < CONFIG_PAX_USERCOPY=y
- < # CONFIG_PAX_SIZE_OVERFLOW is not set
- < # CONFIG_PAX_LATENT_ENTROPY is not set
- <
- < #
- < # Memory Protections
- < #
- < CONFIG_GRKERNSEC_KMEM=y
- < # CONFIG_GRKERNSEC_IO is not set
- < CONFIG_GRKERNSEC_JIT_HARDEN=y
- < CONFIG_GRKERNSEC_PROC_MEMMAP=y
- < CONFIG_GRKERNSEC_BRUTE=y
- < CONFIG_GRKERNSEC_MODHARDEN=y
- < CONFIG_GRKERNSEC_HIDESYM=y
- < CONFIG_GRKERNSEC_KERN_LOCKOUT=y
- <
- < #
- < # Role Based Access Control Options
- < #
- < # CONFIG_GRKERNSEC_NO_RBAC is not set
- < CONFIG_GRKERNSEC_ACL_HIDEKERN=y
- < CONFIG_GRKERNSEC_ACL_MAXTRIES=3
- < CONFIG_GRKERNSEC_ACL_TIMEOUT=30
- <
- < #
- < # Filesystem Protections
- < #
- < CONFIG_GRKERNSEC_PROC=y
- < # CONFIG_GRKERNSEC_PROC_USER is not set
- < CONFIG_GRKERNSEC_PROC_USERGROUP=y
- < CONFIG_GRKERNSEC_PROC_ADD=y
- < CONFIG_GRKERNSEC_LINK=y
- < CONFIG_GRKERNSEC_SYMLINKOWN=y
- < CONFIG_GRKERNSEC_FIFO=y
- < CONFIG_GRKERNSEC_SYSFS_RESTRICT=y
- < CONFIG_GRKERNSEC_ROFS=y
- < CONFIG_GRKERNSEC_CHROOT=y
- < CONFIG_GRKERNSEC_CHROOT_MOUNT=y
- < CONFIG_GRKERNSEC_CHROOT_DOUBLE=y
- < CONFIG_GRKERNSEC_CHROOT_PIVOT=y
- < CONFIG_GRKERNSEC_CHROOT_CHDIR=y
- < CONFIG_GRKERNSEC_CHROOT_CHMOD=y
- < CONFIG_GRKERNSEC_CHROOT_FCHDIR=y
- < CONFIG_GRKERNSEC_CHROOT_MKNOD=y
- < CONFIG_GRKERNSEC_CHROOT_SHMAT=y
- < CONFIG_GRKERNSEC_CHROOT_UNIX=y
- < CONFIG_GRKERNSEC_CHROOT_FINDTASK=y
- < CONFIG_GRKERNSEC_CHROOT_NICE=y
- < CONFIG_GRKERNSEC_CHROOT_SYSCTL=y
- < CONFIG_GRKERNSEC_CHROOT_CAPS=y
- <
- < #
- < # Kernel Auditing
- < #
- < # CONFIG_GRKERNSEC_AUDIT_GROUP is not set
- < # CONFIG_GRKERNSEC_EXECLOG is not set
- < CONFIG_GRKERNSEC_RESLOG=y
- < # CONFIG_GRKERNSEC_CHROOT_EXECLOG is not set
- < CONFIG_GRKERNSEC_AUDIT_PTRACE=y
- < # CONFIG_GRKERNSEC_AUDIT_CHDIR is not set
- < CONFIG_GRKERNSEC_AUDIT_MOUNT=y
- < CONFIG_GRKERNSEC_SIGNAL=y
- < CONFIG_GRKERNSEC_FORKFAIL=y
- < CONFIG_GRKERNSEC_TIME=y
- < CONFIG_GRKERNSEC_PROC_IPADDR=y
- < CONFIG_GRKERNSEC_RWXMAP_LOG=y
- < # CONFIG_GRKERNSEC_AUDIT_TEXTREL is not set
- <
- < #
- < # Executable Protections
- < #
- < CONFIG_GRKERNSEC_DMESG=y
- < CONFIG_GRKERNSEC_HARDEN_PTRACE=y
- < CONFIG_GRKERNSEC_PTRACE_READEXEC=y
- < CONFIG_GRKERNSEC_SETXID=y
- < CONFIG_GRKERNSEC_TPE=y
- < CONFIG_GRKERNSEC_TPE_ALL=y
- < CONFIG_GRKERNSEC_TPE_INVERT=y
- < CONFIG_GRKERNSEC_TPE_GID=9999
- <
- < #
- < # Network Protections
- < #
- < CONFIG_GRKERNSEC_RANDNET=y
- < CONFIG_GRKERNSEC_BLACKHOLE=y
- < # CONFIG_GRKERNSEC_SOCKET is not set
- <
- < #
- < # Sysctl Support
- < #
- < CONFIG_GRKERNSEC_SYSCTL=y
- < CONFIG_GRKERNSEC_SYSCTL_ON=y
- <
- < #
- < # Logging Options
- < #
- < CONFIG_GRKERNSEC_FLOODTIME=10
- < CONFIG_GRKERNSEC_FLOODBURST=6
- 5734a5578
- > # CONFIG_SECURITY_YAMA is not set
- 5759c5603
- < CONFIG_CRYPTO_HASH=y
- ---
- > CONFIG_CRYPTO_HASH=m
- 5819c5663
- < CONFIG_CRYPTO_SHA256=y
- ---
- > CONFIG_CRYPTO_SHA256=m
- 5965c5809
- < CONFIG_OID_REGISTRY=m
- ---
- > CONFIG_OID_REGISTRY=m
- \ No newline at end of file
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement