From f9fdb633470bc63505119d634ef85b430a8c1d9e Mon Sep 17 00:00:00 2001 From: Stefan Reimer Date: Sun, 5 Oct 2014 20:21:04 -0700 Subject: [PATCH] Moved kernel config to scripts, updated 3.15.10 --- .../kernel-config-3.15.10-hardened-r1 | 34 ++++++++++++++++--- 1 file changed, 29 insertions(+), 5 deletions(-) rename sys-kernel/hardened-sources/kernel-config-3.15.8-hardened => scripts/kernel-config-3.15.10-hardened-r1 (99%) diff --git a/sys-kernel/hardened-sources/kernel-config-3.15.8-hardened b/scripts/kernel-config-3.15.10-hardened-r1 similarity index 99% rename from sys-kernel/hardened-sources/kernel-config-3.15.8-hardened rename to scripts/kernel-config-3.15.10-hardened-r1 index fdb6253..02b4788 100644 --- a/sys-kernel/hardened-sources/kernel-config-3.15.8-hardened +++ b/scripts/kernel-config-3.15.10-hardened-r1 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 3.15.8-hardened Kernel Configuration +# Linux/x86 3.15.10-hardened-r1 Kernel Configuration # CONFIG_64BIT=y CONFIG_X86_64=y @@ -402,6 +402,8 @@ CONFIG_X86_MCE_AMD=y CONFIG_X86_MCE_THRESHOLD=y # CONFIG_X86_MCE_INJECT is not set CONFIG_X86_THERMAL_VECTOR=y +CONFIG_X86_16BIT=y +CONFIG_X86_ESPFIX64=y CONFIG_I8K=m CONFIG_MICROCODE=m CONFIG_MICROCODE_INTEL=y @@ -537,6 +539,7 @@ CONFIG_ACPI_HOTPLUG_CPU=y CONFIG_ACPI_PROCESSOR_AGGREGATOR=m CONFIG_ACPI_THERMAL=m CONFIG_ACPI_NUMA=y +CONFIG_ACPI_CUSTOM_DSDT_FILE="" # CONFIG_ACPI_CUSTOM_DSDT is not set CONFIG_ACPI_INITRD_TABLE_OVERRIDE=y # CONFIG_ACPI_DEBUG is not set @@ -1258,7 +1261,7 @@ CONFIG_HAVE_BPF_JIT=y CONFIG_UEVENT_HELPER_PATH="" CONFIG_DEVTMPFS=y CONFIG_DEVTMPFS_MOUNT=y -CONFIG_STANDALONE=y +# CONFIG_STANDALONE is not set # CONFIG_PREVENT_FIRMWARE_BUILD is not set CONFIG_FW_LOADER=m # CONFIG_FIRMWARE_IN_KERNEL is not set @@ -4275,7 +4278,25 @@ CONFIG_LEDS_TRIGGER_TRANSIENT=m CONFIG_LEDS_TRIGGER_CAMERA=m # CONFIG_ACCESSIBILITY is not set # CONFIG_INFINIBAND is not set -# CONFIG_EDAC is not set +CONFIG_EDAC=y +CONFIG_EDAC_LEGACY_SYSFS=y +# CONFIG_EDAC_DEBUG is not set +CONFIG_EDAC_DECODE_MCE=y +# CONFIG_EDAC_MCE_INJ is not set +CONFIG_EDAC_MM_EDAC=m +CONFIG_EDAC_AMD64=m +# CONFIG_EDAC_AMD64_ERROR_INJECTION is not set +# CONFIG_EDAC_E752X is not set +# CONFIG_EDAC_I82975X is not set +# CONFIG_EDAC_I3000 is not set +# CONFIG_EDAC_I3200 is not set +# CONFIG_EDAC_X38 is not set +# CONFIG_EDAC_I5400 is not set +CONFIG_EDAC_I7CORE=m +# CONFIG_EDAC_I5000 is not set +# CONFIG_EDAC_I5100 is not set +# CONFIG_EDAC_I7300 is not set +CONFIG_EDAC_SBRIDGE=m CONFIG_RTC_LIB=y CONFIG_RTC_CLASS=y CONFIG_RTC_HCTOSYS=y @@ -4985,7 +5006,6 @@ CONFIG_NTFS_RW=y # Pseudo filesystems # CONFIG_PROC_FS=y -# CONFIG_PROC_KCORE is not set CONFIG_PROC_SYSCTL=y CONFIG_KERNFS=y CONFIG_SYSFS=y @@ -5361,6 +5381,7 @@ CONFIG_PAX_USERCOPY_SLABS=y CONFIG_GRKERNSEC=y # CONFIG_GRKERNSEC_CONFIG_AUTO is not set CONFIG_GRKERNSEC_CONFIG_CUSTOM=y +CONFIG_GRKERNSEC_PROC_GID=10 # # Customize Configuration @@ -5444,7 +5465,10 @@ CONFIG_GRKERNSEC_ACL_TIMEOUT=30 # # Filesystem Protections # -# CONFIG_GRKERNSEC_PROC is not set +CONFIG_GRKERNSEC_PROC=y +# CONFIG_GRKERNSEC_PROC_USER is not set +CONFIG_GRKERNSEC_PROC_USERGROUP=y +CONFIG_GRKERNSEC_PROC_ADD=y CONFIG_GRKERNSEC_LINK=y # CONFIG_GRKERNSEC_SYMLINKOWN is not set CONFIG_GRKERNSEC_FIFO=y