x86_64-grsec-ARCH.diff

55c55
< CONFIG_LOCALVERSION="-grsec"
---
> CONFIG_LOCALVERSION="-ARCH"
867d866
< CONFIG_NETFILTER_XT_MATCH_GRADM=m
5236,5238c5235
< CONFIG_JFFS2_FS_XATTR=y
< CONFIG_JFFS2_FS_POSIX_ACL=y
< CONFIG_JFFS2_FS_SECURITY=y
---
> # CONFIG_JFFS2_FS_XATTR is not set
5560,5713d5556
<
< #
< # Grsecurity
< #
< CONFIG_TASK_SIZE_MAX_SHIFT=47
< CONFIG_PAX_USERCOPY_SLABS=y
< CONFIG_GRKERNSEC=y
< # CONFIG_GRKERNSEC_CONFIG_AUTO is not set
< CONFIG_GRKERNSEC_CONFIG_CUSTOM=y
< CONFIG_GRKERNSEC_PROC_GID=9998
< CONFIG_GRKERNSEC_TPE_TRUSTED_GID=9999
< CONFIG_GRKERNSEC_SYMLINKOWN_GID=33
<
< #
< # Customize Configuration
< #
<
< #
< # PaX
< #
< CONFIG_PAX=y
<
< #
< # PaX Control
< #
< # CONFIG_PAX_SOFTMODE is not set
< # CONFIG_PAX_EI_PAX is not set
< CONFIG_PAX_PT_PAX_FLAGS=y
< CONFIG_PAX_XATTR_PAX_FLAGS=y
< # CONFIG_PAX_NO_ACL_FLAGS is not set
< CONFIG_PAX_HAVE_ACL_FLAGS=y
< # CONFIG_PAX_HOOK_ACL_FLAGS is not set
<
< #
< # Non-executable pages
< #
< CONFIG_PAX_NOEXEC=y
< CONFIG_PAX_PAGEEXEC=y
< CONFIG_PAX_EMUTRAMP=y
< CONFIG_PAX_MPROTECT=y
< # CONFIG_PAX_MPROTECT_COMPAT is not set
< # CONFIG_PAX_ELFRELOCS is not set
< CONFIG_PAX_KERNEXEC_PLUGIN_METHOD=""
<
< #
< # Address Space Layout Randomization
< #
< CONFIG_PAX_ASLR=y
< CONFIG_PAX_RANDKSTACK=y
< CONFIG_PAX_RANDUSTACK=y
< CONFIG_PAX_RANDMMAP=y
<
< #
< # Miscellaneous hardening features
< #
< CONFIG_PAX_MEMORY_STACKLEAK=y
< CONFIG_PAX_REFCOUNT=y
< CONFIG_PAX_USERCOPY=y
< # CONFIG_PAX_SIZE_OVERFLOW is not set
< # CONFIG_PAX_LATENT_ENTROPY is not set
<
< #
< # Memory Protections
< #
< CONFIG_GRKERNSEC_KMEM=y
< # CONFIG_GRKERNSEC_IO is not set
< CONFIG_GRKERNSEC_JIT_HARDEN=y
< CONFIG_GRKERNSEC_PROC_MEMMAP=y
< CONFIG_GRKERNSEC_BRUTE=y
< CONFIG_GRKERNSEC_MODHARDEN=y
< CONFIG_GRKERNSEC_HIDESYM=y
< CONFIG_GRKERNSEC_KERN_LOCKOUT=y
<
< #
< # Role Based Access Control Options
< #
< # CONFIG_GRKERNSEC_NO_RBAC is not set
< CONFIG_GRKERNSEC_ACL_HIDEKERN=y
< CONFIG_GRKERNSEC_ACL_MAXTRIES=3
< CONFIG_GRKERNSEC_ACL_TIMEOUT=30
<
< #
< # Filesystem Protections
< #
< CONFIG_GRKERNSEC_PROC=y
< # CONFIG_GRKERNSEC_PROC_USER is not set
< CONFIG_GRKERNSEC_PROC_USERGROUP=y
< CONFIG_GRKERNSEC_PROC_ADD=y
< CONFIG_GRKERNSEC_LINK=y
< CONFIG_GRKERNSEC_SYMLINKOWN=y
< CONFIG_GRKERNSEC_FIFO=y
< CONFIG_GRKERNSEC_SYSFS_RESTRICT=y
< CONFIG_GRKERNSEC_ROFS=y
< CONFIG_GRKERNSEC_CHROOT=y
< CONFIG_GRKERNSEC_CHROOT_MOUNT=y
< CONFIG_GRKERNSEC_CHROOT_DOUBLE=y
< CONFIG_GRKERNSEC_CHROOT_PIVOT=y
< CONFIG_GRKERNSEC_CHROOT_CHDIR=y
< CONFIG_GRKERNSEC_CHROOT_CHMOD=y
< CONFIG_GRKERNSEC_CHROOT_FCHDIR=y
< CONFIG_GRKERNSEC_CHROOT_MKNOD=y
< CONFIG_GRKERNSEC_CHROOT_SHMAT=y
< CONFIG_GRKERNSEC_CHROOT_UNIX=y
< CONFIG_GRKERNSEC_CHROOT_FINDTASK=y
< CONFIG_GRKERNSEC_CHROOT_NICE=y
< CONFIG_GRKERNSEC_CHROOT_SYSCTL=y
< CONFIG_GRKERNSEC_CHROOT_CAPS=y
<
< #
< # Kernel Auditing
< #
< # CONFIG_GRKERNSEC_AUDIT_GROUP is not set
< # CONFIG_GRKERNSEC_EXECLOG is not set
< CONFIG_GRKERNSEC_RESLOG=y
< # CONFIG_GRKERNSEC_CHROOT_EXECLOG is not set
< CONFIG_GRKERNSEC_AUDIT_PTRACE=y
< # CONFIG_GRKERNSEC_AUDIT_CHDIR is not set
< CONFIG_GRKERNSEC_AUDIT_MOUNT=y
< CONFIG_GRKERNSEC_SIGNAL=y
< CONFIG_GRKERNSEC_FORKFAIL=y
< CONFIG_GRKERNSEC_TIME=y
< CONFIG_GRKERNSEC_PROC_IPADDR=y
< CONFIG_GRKERNSEC_RWXMAP_LOG=y
< # CONFIG_GRKERNSEC_AUDIT_TEXTREL is not set
<
< #
< # Executable Protections
< #
< CONFIG_GRKERNSEC_DMESG=y
< CONFIG_GRKERNSEC_HARDEN_PTRACE=y
< CONFIG_GRKERNSEC_PTRACE_READEXEC=y
< CONFIG_GRKERNSEC_SETXID=y
< CONFIG_GRKERNSEC_TPE=y
< CONFIG_GRKERNSEC_TPE_ALL=y
< CONFIG_GRKERNSEC_TPE_INVERT=y
< CONFIG_GRKERNSEC_TPE_GID=9999
<
< #
< # Network Protections
< #
< CONFIG_GRKERNSEC_RANDNET=y
< CONFIG_GRKERNSEC_BLACKHOLE=y
< # CONFIG_GRKERNSEC_SOCKET is not set
<
< #
< # Sysctl Support
< #
< CONFIG_GRKERNSEC_SYSCTL=y
< CONFIG_GRKERNSEC_SYSCTL_ON=y
<
< #
< # Logging Options
< #
< CONFIG_GRKERNSEC_FLOODTIME=10
< CONFIG_GRKERNSEC_FLOODBURST=6
5734a5578
> # CONFIG_SECURITY_YAMA is not set
5759c5603
< CONFIG_CRYPTO_HASH=y
---
> CONFIG_CRYPTO_HASH=m
5819c5663
< CONFIG_CRYPTO_SHA256=y
---
> CONFIG_CRYPTO_SHA256=m
5965c5809
< CONFIG_OID_REGISTRY=m
---
> CONFIG_OID_REGISTRY=m
\ No newline at end of file