From dacdd7542f15e368b5f600104671b667880a2a2b Mon Sep 17 00:00:00 2001 From: André Fabian Silva Delgado Date: Wed, 10 Sep 2014 00:28:12 -0300 Subject: linux-libre-grsec-3.16.2_gnu.201409082129-2: updating revision * enable KERNEXEC on x86_64 --- libre/linux-libre-grsec/config.x86_64 | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) (limited to 'libre/linux-libre-grsec/config.x86_64') diff --git a/libre/linux-libre-grsec/config.x86_64 b/libre/linux-libre-grsec/config.x86_64 index de6b35bc3..5333ddfe7 100644 --- a/libre/linux-libre-grsec/config.x86_64 +++ b/libre/linux-libre-grsec/config.x86_64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 3.16.2-gnu-201409082129-1-grsec Kernel Configuration +# Linux/x86 3.16.2-gnu-201409082129-2-grsec Kernel Configuration # CONFIG_64BIT=y CONFIG_X86_64=y @@ -6336,10 +6336,6 @@ CONFIG_TIMER_STATS=y # CONFIG_RT_MUTEX_TESTER is not set # CONFIG_DEBUG_SPINLOCK is not set # CONFIG_DEBUG_MUTEXES is not set -# CONFIG_DEBUG_WW_MUTEX_SLOWPATH is not set -# CONFIG_DEBUG_LOCK_ALLOC is not set -# CONFIG_PROVE_LOCKING is not set -# CONFIG_LOCK_STAT is not set # CONFIG_DEBUG_ATOMIC_SLEEP is not set # CONFIG_DEBUG_LOCKING_API_SELFTESTS is not set # CONFIG_LOCK_TORTURE_TEST is not set @@ -6472,6 +6468,7 @@ CONFIG_DEFAULT_IO_DELAY_TYPE=0 # # Grsecurity # +CONFIG_PAX_KERNEXEC_PLUGIN=y CONFIG_PAX_PER_CPU_PGD=y CONFIG_TASK_SIZE_MAX_SHIFT=42 CONFIG_PAX_USERCOPY_SLABS=y @@ -6510,8 +6507,9 @@ CONFIG_PAX_EMUTRAMP=y CONFIG_PAX_MPROTECT=y # CONFIG_PAX_MPROTECT_COMPAT is not set # CONFIG_PAX_ELFRELOCS is not set -# CONFIG_PAX_KERNEXEC is not set -CONFIG_PAX_KERNEXEC_PLUGIN_METHOD="" +CONFIG_PAX_KERNEXEC=y +CONFIG_PAX_KERNEXEC_PLUGIN_METHOD_BTS=y +CONFIG_PAX_KERNEXEC_PLUGIN_METHOD="bts" # # Address Space Layout Randomization @@ -6529,6 +6527,7 @@ CONFIG_PAX_MEMORY_STACKLEAK=y CONFIG_PAX_MEMORY_STRUCTLEAK=y CONFIG_PAX_MEMORY_UDEREF=y CONFIG_PAX_REFCOUNT=y +CONFIG_PAX_CONSTIFY_PLUGIN=y CONFIG_PAX_USERCOPY=y # CONFIG_PAX_USERCOPY_DEBUG is not set CONFIG_PAX_SIZE_OVERFLOW=y -- cgit v1.2.3-54-g00ecf