| 1,7 → 1,7 |
|---|
| # |
| # Automatically generated make config: don't edit |
| # Linux kernel version: 2.6.32.61-1 |
| # Wed Jun 12 16:50:41 2013 |
| # Linux kernel version: 2.6.32 |
| # Mon Jun 20 15:16:52 2011 |
| # |
| CONFIG_64BIT=y |
| # CONFIG_X86_32 is not set |
| 232,7 → 232,7 |
|---|
| CONFIG_SCHED_OMIT_FRAME_POINTER=y |
| CONFIG_PARAVIRT_GUEST=y |
| CONFIG_XEN=y |
| CONFIG_XEN_MAX_DOMAIN_MEMORY=70 |
| CONFIG_XEN_MAX_DOMAIN_MEMORY=32 |
| CONFIG_XEN_SAVE_RESTORE=y |
| # CONFIG_XEN_DEBUG_FS is not set |
| CONFIG_KVM_CLOCK=y |
| 317,6 → 317,7 |
|---|
| CONFIG_MICROCODE_INTEL=y |
| CONFIG_MICROCODE_AMD=y |
| CONFIG_MICROCODE_OLD_INTERFACE=y |
| CONFIG_X86_MSR=m |
| CONFIG_X86_CPUID=m |
| CONFIG_ARCH_PHYS_ADDR_T_64BIT=y |
| CONFIG_DIRECT_GBPAGES=y |
| 367,7 → 368,6 |
|---|
| CONFIG_MTRR_SANITIZER_SPARE_REG_NR_DEFAULT=1 |
| CONFIG_X86_PAT=y |
| CONFIG_ARCH_USES_PG_UNCACHED=y |
| CONFIG_ARCH_RANDOM=y |
| CONFIG_EFI=y |
| CONFIG_SECCOMP=y |
| CONFIG_CC_STACKPROTECTOR=y |
| 1505,7 → 1505,6 |
|---|
| CONFIG_BE2ISCSI=m |
| CONFIG_BLK_DEV_3W_XXXX_RAID=m |
| CONFIG_SCSI_3W_9XXX=m |
| # CONFIG_SCSI_3W_SAS is not set |
| CONFIG_SCSI_ACARD=m |
| CONFIG_SCSI_AACRAID=m |
| CONFIG_SCSI_AIC7XXX=m |
| 1539,7 → 1538,6 |
|---|
| # CONFIG_SCSI_MPT2SAS_LOGGING is not set |
| CONFIG_SCSI_HPTIOP=m |
| CONFIG_SCSI_BUSLOGIC=m |
| # CONFIG_VMWARE_PVSCSI is not set |
| CONFIG_LIBFC=m |
| CONFIG_LIBFCOE=m |
| CONFIG_FCOE=m |
| 4487,67 → 4485,17 |
|---|
| # |
| # Grsecurity |
| # |
| CONFIG_TASK_SIZE_MAX_SHIFT=47 |
| CONFIG_PAX_USERCOPY_SLABS=y |
| CONFIG_GRKERNSEC=y |
| # CONFIG_GRKERNSEC_CONFIG_AUTO is not set |
| CONFIG_GRKERNSEC_CONFIG_CUSTOM=y |
| # CONFIG_GRKERNSEC_LOW is not set |
| # CONFIG_GRKERNSEC_MEDIUM is not set |
| # CONFIG_GRKERNSEC_HIGH is not set |
| CONFIG_GRKERNSEC_CUSTOM=y |
| |
| # |
| # Customize Configuration |
| # Address Space Protection |
| # |
| |
| # |
| # PaX |
| # |
| CONFIG_PAX=y |
| |
| # |
| # PaX Control |
| # |
| CONFIG_PAX_SOFTMODE=y |
| CONFIG_PAX_EI_PAX=y |
| CONFIG_PAX_PT_PAX_FLAGS=y |
| CONFIG_PAX_XATTR_PAX_FLAGS=y |
| CONFIG_PAX_NO_ACL_FLAGS=y |
| # CONFIG_PAX_HAVE_ACL_FLAGS is not set |
| # CONFIG_PAX_HOOK_ACL_FLAGS is not set |
| |
| # |
| # Non-executable pages |
| # |
| CONFIG_PAX_NOEXEC=y |
| CONFIG_PAX_PAGEEXEC=y |
| CONFIG_PAX_EMUTRAMP=y |
| CONFIG_PAX_MPROTECT=y |
| # CONFIG_PAX_MPROTECT_COMPAT is not set |
| # CONFIG_PAX_ELFRELOCS is not set |
| CONFIG_PAX_KERNEXEC_PLUGIN_METHOD="" |
| |
| # |
| # Address Space Layout Randomization |
| # |
| CONFIG_PAX_ASLR=y |
| CONFIG_PAX_RANDKSTACK=y |
| CONFIG_PAX_RANDUSTACK=y |
| CONFIG_PAX_RANDMMAP=y |
| |
| # |
| # Miscellaneous hardening features |
| # |
| # CONFIG_PAX_MEMORY_STACKLEAK is not set |
| CONFIG_PAX_REFCOUNT=y |
| CONFIG_PAX_USERCOPY=y |
| # CONFIG_PAX_USERCOPY_DEBUG is not set |
| # CONFIG_PAX_SIZE_OVERFLOW is not set |
| # CONFIG_PAX_LATENT_ENTROPY is not set |
| |
| # |
| # Memory Protections |
| # |
| CONFIG_GRKERNSEC_KMEM=y |
| CONFIG_GRKERNSEC_IO=y |
| CONFIG_GRKERNSEC_RAND_THREADSTACK=y |
| CONFIG_GRKERNSEC_PROC_MEMMAP=y |
| CONFIG_GRKERNSEC_BRUTE=y |
| CONFIG_GRKERNSEC_MODHARDEN=y |
| 4569,11 → 4517,9 |
|---|
| CONFIG_GRKERNSEC_PROC_USER=y |
| CONFIG_GRKERNSEC_PROC_ADD=y |
| CONFIG_GRKERNSEC_LINK=y |
| # CONFIG_GRKERNSEC_SYMLINKOWN is not set |
| CONFIG_GRKERNSEC_FIFO=y |
| CONFIG_GRKERNSEC_SYSFS_RESTRICT=y |
| # CONFIG_GRKERNSEC_ROFS is not set |
| CONFIG_GRKERNSEC_DEVICE_SIDECHANNEL=y |
| CONFIG_GRKERNSEC_CHROOT=y |
| CONFIG_GRKERNSEC_CHROOT_MOUNT=y |
| CONFIG_GRKERNSEC_CHROOT_DOUBLE=y |
| 4588,7 → 4534,6 |
|---|
| CONFIG_GRKERNSEC_CHROOT_NICE=y |
| CONFIG_GRKERNSEC_CHROOT_SYSCTL=y |
| CONFIG_GRKERNSEC_CHROOT_CAPS=y |
| # CONFIG_GRKERNSEC_CHROOT_INITRD is not set |
| |
| # |
| # Kernel Auditing |
| 4610,10 → 4555,9 |
|---|
| # |
| # Executable Protections |
| # |
| CONFIG_GRKERNSEC_EXECVE=y |
| CONFIG_GRKERNSEC_DMESG=y |
| CONFIG_GRKERNSEC_HARDEN_PTRACE=y |
| CONFIG_GRKERNSEC_PTRACE_READEXEC=y |
| CONFIG_GRKERNSEC_SETXID=y |
| # CONFIG_GRKERNSEC_TPE is not set |
| |
| # |
| 4621,11 → 4565,10 |
|---|
| # |
| CONFIG_GRKERNSEC_RANDNET=y |
| CONFIG_GRKERNSEC_BLACKHOLE=y |
| CONFIG_GRKERNSEC_NO_SIMULT_CONNECT=y |
| # CONFIG_GRKERNSEC_SOCKET is not set |
| |
| # |
| # Sysctl Support |
| # Sysctl support |
| # |
| CONFIG_GRKERNSEC_SYSCTL=y |
| # CONFIG_GRKERNSEC_SYSCTL_DISTRO is not set |
| 4636,6 → 4579,48 |
|---|
| # |
| CONFIG_GRKERNSEC_FLOODTIME=10 |
| CONFIG_GRKERNSEC_FLOODBURST=4 |
| |
| # |
| # PaX |
| # |
| CONFIG_TASK_SIZE_MAX_SHIFT=47 |
| CONFIG_PAX=y |
| |
| # |
| # PaX Control |
| # |
| CONFIG_PAX_SOFTMODE=y |
| CONFIG_PAX_EI_PAX=y |
| CONFIG_PAX_PT_PAX_FLAGS=y |
| CONFIG_PAX_NO_ACL_FLAGS=y |
| # CONFIG_PAX_HAVE_ACL_FLAGS is not set |
| # CONFIG_PAX_HOOK_ACL_FLAGS is not set |
| |
| # |
| # Non-executable pages |
| # |
| CONFIG_PAX_NOEXEC=y |
| CONFIG_PAX_PAGEEXEC=y |
| CONFIG_PAX_EMUTRAMP=y |
| CONFIG_PAX_MPROTECT=y |
| # CONFIG_PAX_MPROTECT_COMPAT is not set |
| # CONFIG_PAX_ELFRELOCS is not set |
| |
| # |
| # Address Space Layout Randomization |
| # |
| CONFIG_PAX_ASLR=y |
| CONFIG_PAX_RANDKSTACK=y |
| CONFIG_PAX_RANDUSTACK=y |
| CONFIG_PAX_RANDMMAP=y |
| |
| # |
| # Miscellaneous hardening features |
| # |
| # CONFIG_PAX_MEMORY_SANITIZE is not set |
| # CONFIG_PAX_MEMORY_STACKLEAK is not set |
| CONFIG_PAX_REFCOUNT=y |
| CONFIG_PAX_USERCOPY=y |
| CONFIG_KEYS=y |
| CONFIG_KEYS_DEBUG_PROC_KEYS=y |
| CONFIG_SECURITY=y |