aboutsummaryrefslogtreecommitdiffstats
path: root/main/linux-grsec/kernelconfig.x86_64
diff options
context:
space:
mode:
authorNatanael Copa <ncopa@alpinelinux.org>2010-12-07 14:18:13 +0000
committerNatanael Copa <ncopa@alpinelinux.org>2010-12-07 14:18:13 +0000
commitb868fd504bdc0d6abede6b4ca4892405d9810560 (patch)
tree41e2151bc60da11a87d39698fafb42f086d1d629 /main/linux-grsec/kernelconfig.x86_64
parent5d11ca20ed78fe4cf148648fd444beb45c2cbb58 (diff)
downloadaports-b868fd504bdc0d6abede6b4ca4892405d9810560.tar.bz2
aports-b868fd504bdc0d6abede6b4ca4892405d9810560.tar.xz
main/linux-grsec: enable grsecurity proc usergroup
All users in group number 700 will be able to see all process info, network related stuff and kernel symbols. ref #490
Diffstat (limited to 'main/linux-grsec/kernelconfig.x86_64')
-rw-r--r--main/linux-grsec/kernelconfig.x86_644
1 files changed, 3 insertions, 1 deletions
diff --git a/main/linux-grsec/kernelconfig.x86_64 b/main/linux-grsec/kernelconfig.x86_64
index eb3a78f3e9..96724cd7d4 100644
--- a/main/linux-grsec/kernelconfig.x86_64
+++ b/main/linux-grsec/kernelconfig.x86_64
@@ -4504,7 +4504,9 @@ CONFIG_GRKERNSEC_ACL_TIMEOUT=30
# Filesystem Protections
#
CONFIG_GRKERNSEC_PROC=y
-CONFIG_GRKERNSEC_PROC_USER=y
+# CONFIG_GRKERNSEC_PROC_USER is not set
+CONFIG_GRKERNSEC_PROC_USERGROUP=y
+CONFIG_GRKERNSEC_PROC_GID=700
CONFIG_GRKERNSEC_PROC_ADD=y
CONFIG_GRKERNSEC_LINK=y
CONFIG_GRKERNSEC_FIFO=y