From f6f718575335c86eb6d93dcc8df345eab3da460b Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Wed, 3 Aug 2011 12:23:29 +0000 Subject: main/linux-grsec: enable UDEREF on x86 --- main/linux-grsec/APKBUILD | 5 +++-- main/linux-grsec/kernelconfig.x86 | 8 +++----- 2 files changed, 6 insertions(+), 7 deletions(-) (limited to 'main/linux-grsec') diff --git a/main/linux-grsec/APKBUILD b/main/linux-grsec/APKBUILD index 72e5127e0..750aa0f37 100644 --- a/main/linux-grsec/APKBUILD +++ b/main/linux-grsec/APKBUILD @@ -4,7 +4,7 @@ _flavor=grsec pkgname=linux-${_flavor} pkgver=2.6.38.8 _kernver=2.6.38 -pkgrel=0 +pkgrel=1 pkgdesc="Linux kernel with grsecurity" url=http://grsecurity.net depends="mkinitfs linux-firmware" @@ -69,6 +69,7 @@ menuconfig() { build() { cd "$srcdir"/build + export GCC_SPECS=/usr/share/gcc/hardenednopie.specs make CC="${CC:-gcc}" \ KBUILD_BUILD_VERSION="$((pkgrel + 1 ))-Alpine" \ || return 1 @@ -141,5 +142,5 @@ c0f416f6a2e916633f697287cc7cb914 patch-2.6.38.8.bz2 58e1f9194fa75df9afdf2746370fa3cb grsecurity-2.2.2-2.6.38.8-unofficial.patch 776adeeb5272093574f8836c5037dd7d 0004-arp-flush-arp-cache-on-device-change.patch aa1b82da0cabfb41c5e6da5bddf60bab net-gre-provide-multicast-mappings-for-ipv4-and-ipv6.patch -f4cf5b0ddfeef7aa87fb27792aff88a4 kernelconfig.x86 +991a83798618ad3318502116a8044d99 kernelconfig.x86 0a73d8d896101de90f47dae32119e7ca kernelconfig.x86_64" diff --git a/main/linux-grsec/kernelconfig.x86 b/main/linux-grsec/kernelconfig.x86 index f21ca50e0..a648b9945 100644 --- a/main/linux-grsec/kernelconfig.x86 +++ b/main/linux-grsec/kernelconfig.x86 @@ -1,7 +1,7 @@ # # Automatically generated make config: don't edit -# Linux/i386 2.6.38.6 Kernel Configuration -# Thu May 19 13:36:21 2011 +# Linux/i386 2.6.38.8 Kernel Configuration +# Wed Aug 3 08:43:09 2011 # # CONFIG_64BIT is not set CONFIG_X86_32=y @@ -49,7 +49,6 @@ CONFIG_ARCH_SUPPORTS_DEBUG_PAGEALLOC=y CONFIG_X86_32_SMP=y CONFIG_X86_HT=y CONFIG_X86_TRAMPOLINE=y -CONFIG_X86_32_LAZY_GS=y CONFIG_ARCH_HWEIGHT_CFLAGS="-fcall-saved-ecx -fcall-saved-edx" CONFIG_KTIME_SCALAR=y CONFIG_ARCH_CPU_PROBE_RELEASE=y @@ -416,7 +415,6 @@ CONFIG_X86_PAT=y CONFIG_ARCH_USES_PG_UNCACHED=y # CONFIG_EFI is not set # CONFIG_SECCOMP is not set -# CONFIG_CC_STACKPROTECTOR is not set # CONFIG_HZ_100 is not set # CONFIG_HZ_250 is not set CONFIG_HZ_300=y @@ -4947,7 +4945,7 @@ CONFIG_PAX_RANDMMAP=y # # CONFIG_PAX_MEMORY_SANITIZE is not set # CONFIG_PAX_MEMORY_STACKLEAK is not set -# CONFIG_PAX_MEMORY_UDEREF is not set +CONFIG_PAX_MEMORY_UDEREF=y CONFIG_PAX_REFCOUNT=y # CONFIG_PAX_USERCOPY is not set CONFIG_KEYS=y -- cgit v1.2.3