| 1,6 → 1,6 |
|---|
| # |
| # Automatically generated file; DO NOT EDIT. |
| # Linux/x86_64 3.2.57.1-grsec Kernel Configuration |
| # Linux/x86_64 3.2.60.1-grsec Kernel Configuration |
| # |
| CONFIG_64BIT=y |
| # CONFIG_X86_32 is not set |
| 1711,6 → 1711,7 |
|---|
| CONFIG_SCSI_PM8001=m |
| CONFIG_SCSI_SRP=m |
| CONFIG_SCSI_BFA_FC=m |
| # CONFIG_SCSI_VIRTIO is not set |
| CONFIG_SCSI_LOWLEVEL_PCMCIA=y |
| CONFIG_PCMCIA_AHA152X=m |
| CONFIG_PCMCIA_FDOMAIN=m |
| 5377,6 → 5378,8 |
|---|
| CONFIG_GRKERNSEC=y |
| # CONFIG_GRKERNSEC_CONFIG_AUTO is not set |
| CONFIG_GRKERNSEC_CONFIG_CUSTOM=y |
| CONFIG_GRKERNSEC_TPE_TRUSTED_GID=60521 |
| CONFIG_GRKERNSEC_SYMLINKOWN_GID=60535 |
| |
| # |
| # Customize Configuration |
| 5438,6 → 5441,7 |
|---|
| CONFIG_GRKERNSEC_PERF_HARDEN=y |
| CONFIG_GRKERNSEC_RAND_THREADSTACK=y |
| CONFIG_GRKERNSEC_PROC_MEMMAP=y |
| CONFIG_GRKERNSEC_KSTACKOVERFLOW=y |
| CONFIG_GRKERNSEC_BRUTE=y |
| CONFIG_GRKERNSEC_MODHARDEN=y |
| CONFIG_GRKERNSEC_HIDESYM=y |
| 5459,10 → 5463,10 |
|---|
| CONFIG_GRKERNSEC_PROC_USER=y |
| CONFIG_GRKERNSEC_PROC_ADD=y |
| CONFIG_GRKERNSEC_LINK=y |
| # CONFIG_GRKERNSEC_SYMLINKOWN is not set |
| CONFIG_GRKERNSEC_SYMLINKOWN=y |
| CONFIG_GRKERNSEC_FIFO=y |
| CONFIG_GRKERNSEC_SYSFS_RESTRICT=y |
| # CONFIG_GRKERNSEC_ROFS is not set |
| CONFIG_GRKERNSEC_ROFS=y |
| CONFIG_GRKERNSEC_DEVICE_SIDECHANNEL=y |
| CONFIG_GRKERNSEC_CHROOT=y |
| CONFIG_GRKERNSEC_CHROOT_MOUNT=y |
| 5483,18 → 5487,19 |
|---|
| # |
| # Kernel Auditing |
| # |
| # CONFIG_GRKERNSEC_AUDIT_GROUP is not set |
| # CONFIG_GRKERNSEC_EXECLOG is not set |
| CONFIG_GRKERNSEC_AUDIT_GROUP=y |
| CONFIG_GRKERNSEC_AUDIT_GID=60510 |
| CONFIG_GRKERNSEC_EXECLOG=y |
| CONFIG_GRKERNSEC_RESLOG=y |
| CONFIG_GRKERNSEC_CHROOT_EXECLOG=y |
| # CONFIG_GRKERNSEC_AUDIT_PTRACE is not set |
| # CONFIG_GRKERNSEC_AUDIT_CHDIR is not set |
| CONFIG_GRKERNSEC_AUDIT_PTRACE=y |
| CONFIG_GRKERNSEC_AUDIT_CHDIR=y |
| CONFIG_GRKERNSEC_AUDIT_MOUNT=y |
| CONFIG_GRKERNSEC_SIGNAL=y |
| CONFIG_GRKERNSEC_FORKFAIL=y |
| # CONFIG_GRKERNSEC_TIME is not set |
| # CONFIG_GRKERNSEC_PROC_IPADDR is not set |
| # CONFIG_GRKERNSEC_RWXMAP_LOG is not set |
| CONFIG_GRKERNSEC_TIME=y |
| CONFIG_GRKERNSEC_PROC_IPADDR=y |
| CONFIG_GRKERNSEC_RWXMAP_LOG=y |
| |
| # |
| # Executable Protections |
| 5504,7 → 5509,10 |
|---|
| CONFIG_GRKERNSEC_PTRACE_READEXEC=y |
| CONFIG_GRKERNSEC_SETXID=y |
| CONFIG_GRKERNSEC_HARDEN_IPC=y |
| # CONFIG_GRKERNSEC_TPE is not set |
| CONFIG_GRKERNSEC_TPE=y |
| CONFIG_GRKERNSEC_TPE_ALL=y |
| CONFIG_GRKERNSEC_TPE_INVERT=y |
| CONFIG_GRKERNSEC_TPE_GID=60521 |
| |
| # |
| # Network Protections |
| 5512,12 → 5520,19 |
|---|
| CONFIG_GRKERNSEC_RANDNET=y |
| CONFIG_GRKERNSEC_BLACKHOLE=y |
| CONFIG_GRKERNSEC_NO_SIMULT_CONNECT=y |
| # CONFIG_GRKERNSEC_SOCKET is not set |
| CONFIG_GRKERNSEC_SOCKET=y |
| CONFIG_GRKERNSEC_SOCKET_ALL=y |
| CONFIG_GRKERNSEC_SOCKET_ALL_GID=60500 |
| CONFIG_GRKERNSEC_SOCKET_CLIENT=y |
| CONFIG_GRKERNSEC_SOCKET_CLIENT_GID=60501 |
| CONFIG_GRKERNSEC_SOCKET_SERVER=y |
| CONFIG_GRKERNSEC_SOCKET_SERVER_GID=60502 |
| |
| # |
| # Physical Protections |
| # |
| # CONFIG_GRKERNSEC_DENYUSB is not set |
| CONFIG_GRKERNSEC_DENYUSB=y |
| # CONFIG_GRKERNSEC_DENYUSB_FORCE is not set |
| |
| # |
| # Sysctl Support |