diff options
| author | William Pitcock <nenolod@dereferenced.org> | 2017-01-31 20:05:52 +0000 |
|---|---|---|
| committer | William Pitcock <nenolod@dereferenced.org> | 2017-01-31 20:06:23 +0000 |
| commit | 0debb05afca7e8933a8cf9b69929be86a92f5c22 (patch) | |
| tree | 9a3d59ca41761e57e917f577c5b1bb0b533a80d6 /main/linux-vanilla/config-vanilla.x86_64 | |
| parent | bfe221d6540bb18bfd95a2d0d5f7726853d0561a (diff) | |
| download | aports-0debb05afca7e8933a8cf9b69929be86a92f5c22.tar.bz2 aports-0debb05afca7e8933a8cf9b69929be86a92f5c22.tar.xz | |
main/linux-vanilla: enable Yama (provides some protections like grsecurity)
Diffstat (limited to 'main/linux-vanilla/config-vanilla.x86_64')
| -rw-r--r-- | main/linux-vanilla/config-vanilla.x86_64 | 15 |
1 files changed, 13 insertions, 2 deletions
diff --git a/main/linux-vanilla/config-vanilla.x86_64 b/main/linux-vanilla/config-vanilla.x86_64 index ebe36c88ca..53ea0ccec0 100644 --- a/main/linux-vanilla/config-vanilla.x86_64 +++ b/main/linux-vanilla/config-vanilla.x86_64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 4.4.34 Kernel Configuration +# Linux/x86_64 4.4.45 Kernel Configuration # CONFIG_64BIT=y CONFIG_X86_64=y @@ -834,6 +834,7 @@ CONFIG_IPV6_SUBTREES=y CONFIG_IPV6_MROUTE=y CONFIG_IPV6_MROUTE_MULTIPLE_TABLES=y CONFIG_IPV6_PIMSM_V2=y +# CONFIG_NETLABEL is not set CONFIG_NETWORK_SECMARK=y CONFIG_NET_PTP_CLASSIFY=y CONFIG_NETWORK_PHY_TIMESTAMPING=y @@ -1097,6 +1098,7 @@ CONFIG_IP_NF_TARGET_CLUSTERIP=m CONFIG_IP_NF_TARGET_ECN=m CONFIG_IP_NF_TARGET_TTL=m CONFIG_IP_NF_RAW=m +# CONFIG_IP_NF_SECURITY is not set CONFIG_IP_NF_ARPTABLES=m CONFIG_IP_NF_ARPFILTER=m CONFIG_IP_NF_ARP_MANGLE=m @@ -1134,6 +1136,7 @@ CONFIG_IP6_NF_TARGET_REJECT=m CONFIG_IP6_NF_TARGET_SYNPROXY=m CONFIG_IP6_NF_MANGLE=m CONFIG_IP6_NF_RAW=m +# CONFIG_IP6_NF_SECURITY is not set CONFIG_IP6_NF_NAT=m CONFIG_IP6_NF_TARGET_MASQUERADE=m CONFIG_IP6_NF_TARGET_NPT=m @@ -6026,6 +6029,7 @@ CONFIG_NFSD_V3=y # CONFIG_NFSD_V3_ACL is not set CONFIG_NFSD_V4=y CONFIG_NFSD_PNFS=y +# CONFIG_NFSD_V4_SECURITY_LABEL is not set # CONFIG_NFSD_FAULT_INJECTION is not set CONFIG_GRACE_PERIOD=m CONFIG_LOCKD=m @@ -6349,9 +6353,16 @@ CONFIG_KEYS=y CONFIG_TRUSTED_KEYS=m CONFIG_ENCRYPTED_KEYS=m # CONFIG_SECURITY_DMESG_RESTRICT is not set -# CONFIG_SECURITY is not set +CONFIG_SECURITY=y CONFIG_SECURITYFS=y +# CONFIG_SECURITY_NETWORK is not set +# CONFIG_SECURITY_PATH is not set # CONFIG_INTEL_TXT is not set +# CONFIG_SECURITY_SMACK is not set +# CONFIG_SECURITY_TOMOYO is not set +# CONFIG_SECURITY_APPARMOR is not set +CONFIG_SECURITY_YAMA=y +# CONFIG_INTEGRITY is not set CONFIG_DEFAULT_SECURITY_DAC=y CONFIG_DEFAULT_SECURITY="" CONFIG_XOR_BLOCKS=m |