diff options
Diffstat (limited to 'libre/linux-libre-grsec/linux-libre-grsec.install')
| -rw-r--r-- | libre/linux-libre-grsec/linux-libre-grsec.install | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/libre/linux-libre-grsec/linux-libre-grsec.install b/libre/linux-libre-grsec/linux-libre-grsec.install index 637577244..22a798dfa 100644 --- a/libre/linux-libre-grsec/linux-libre-grsec.install +++ b/libre/linux-libre-grsec/linux-libre-grsec.install @@ -4,6 +4,17 @@ KERNEL_NAME=-grsec KERNEL_VERSION= +_uderef_warning() { + if [[ $(uname -m) = x86_64 ]]; then + cat <<EOF +CONFIG_PAX_MEMORY_UDEREF is now enabled on x86_64 and can be disabled by +passing \`pax_nouderef\` on the kernel line. UDEREF's PCID support on Sandy +Bridge and later is known to have issues with recent kernel versions and can be +disabled by passing \`nopcid\` to use the legacy implementation. +EOF + fi +} + _add_groups() { if getent group tpe-trusted >/dev/null; then groupmod -g 200 -n tpe tpe-trusted @@ -54,6 +65,7 @@ post_install () { fi _add_groups + _uderef_warning } post_upgrade() { @@ -80,6 +92,10 @@ post_upgrade() { fi _add_groups + + if [[ $(vercmp $2 3.15.6.201407232200-2) -lt 0 ]]; then + _uderef_warning + fi } post_remove() { |