From e8b0a3e3ed518e494c79ed5c24123de84609f8e7 Mon Sep 17 00:00:00 2001 From: André Fabian Silva Delgado Date: Wed, 28 May 2014 02:12:28 -0300 Subject: linux-libre-grsec-3.14.4.201405271114-1: updating version * enable the size overflow plugin * enable new CONFIG_GRKERNSEC_KSTACKOVERFLOW option --- libre/linux-libre-grsec/PKGBUILD | 11 +++++++---- libre/linux-libre-grsec/config.i686 | 5 ++--- libre/linux-libre-grsec/config.x86_64 | 6 +++--- 3 files changed, 12 insertions(+), 10 deletions(-) (limited to 'libre/linux-libre-grsec') diff --git a/libre/linux-libre-grsec/PKGBUILD b/libre/linux-libre-grsec/PKGBUILD index 9b2fa2e12..5e0aa6eeb 100644 --- a/libre/linux-libre-grsec/PKGBUILD +++ b/libre/linux-libre-grsec/PKGBUILD @@ -14,7 +14,7 @@ pkgbase=linux-libre-grsec # Build stock -LIBRE-GRSEC kernel _basekernel=3.14 _sublevel=4 _grsecver=3.0 -_timestamp=201405252047 +_timestamp=201405271114 _pkgver=${_basekernel}.${_sublevel} pkgver=${_basekernel}.${_sublevel}.${_timestamp} pkgrel=1 @@ -51,10 +51,10 @@ source=("http://linux-libre.fsfla.org/pub/linux-libre/releases/${_basekernel}-gn "http://www.linux-libre.fsfla.org/pub/linux-libre/lemote/gnewsense/pool/debuginfo/linux-patches-${_lxopkgver}-gnu_0loongsonlibre_mipsel.tar.xz") sha256sums=('477555c709b9407fe37dbd70d3331ff9dde1f9d874aba2741f138d07ae6f281b' '01de5e15a2081197859e617c441de5cac9ddf60bed6fcf4dcff7a54e210e7815' - 'dceb3a6aeb9ba71e68835e37d2add6c6d4c60f6e253b4bd9c20b6a8e82ec0a96' + '76daa7e437ab5fedc51c1fec3a84b7e6901a073b083a94e3a55671bca9e67d34' 'SKIP' - '0b6dbdf4d1677a39b9a0d55e8d7c66fe644fa77d769e3b673064181222b17467' - '8207a533f4fbad05ad26061f924957a7a92436d44a5dd7ca10e61d730c5e0ef9' + 'ffba30739752c6bba5ce0cf33d82748f0c35c3642ac3ca45ad3b99bf85dbb1fc' + '3cfcfcdb946be20cb651b331859bdd2e59947e711f690605d730ff7b75a17fc4' '9d2f34f1a8c514a7117b9b017a1f7312fb351f4d0b079eed102f89361534d486' 'c5451d5e1eafc4f8d28b1a2958ec3102c124433a414a86450fc32058e004156b' '55bf07738a3286168a7929ae16dbca29defd14e77b9d24c487ae4c3d12bb9eb9' @@ -299,6 +299,9 @@ _package() { cp -a tools/gcc/*.h "$pkgdir/usr/lib/modules/${_kernver}/build/tools/gcc/" cp -a tools/gcc/Makefile "$pkgdir/usr/lib/modules/${_kernver}/build/tools/gcc/" install -m644 tools/gcc/*.so "$pkgdir/usr/lib/modules/${_kernver}/build/tools/gcc/" + mkdir -p "$pkgdir/usr/lib/modules/${_kernver}/build/tools/gcc/size_overflow_plugin" + install -m644 tools/gcc/size_overflow_plugin/Makefile tools/gcc/size_overflow_plugin/*.so \ + "$pkgdir/usr/lib/modules/${_kernver}/build/tools/gcc/size_overflow_plugin" # install sysctl configuration for grsecurity switches install -Dm600 "${srcdir}/sysctl.conf" "${pkgdir}/etc/sysctl.d/05-grsecurity.conf" diff --git a/libre/linux-libre-grsec/config.i686 b/libre/linux-libre-grsec/config.i686 index 845032842..fdf8e2d25 100644 --- a/libre/linux-libre-grsec/config.i686 +++ b/libre/linux-libre-grsec/config.i686 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 3.14.3-1 Kernel Configuration +# Linux/x86 3.14.4.201405271114-1 Kernel Configuration # # CONFIG_64BIT is not set CONFIG_X86_32=y @@ -6282,7 +6282,6 @@ CONFIG_RCU_CPU_STALL_TIMEOUT=60 # CONFIG_NOTIFIER_ERROR_INJECTION is not set # CONFIG_FAULT_INJECTION is not set CONFIG_ARCH_HAS_DEBUG_STRICT_USER_COPY_CHECKS=y -# CONFIG_DEBUG_STRICT_USER_COPY_CHECKS is not set CONFIG_USER_STACKTRACE_SUPPORT=y CONFIG_NOP_TRACER=y CONFIG_HAVE_FUNCTION_TRACER=y @@ -6445,7 +6444,7 @@ CONFIG_PAX_REFCOUNT=y # CONFIG_PAX_CONSTIFY_PLUGIN is not set CONFIG_PAX_USERCOPY=y # CONFIG_PAX_USERCOPY_DEBUG is not set -# CONFIG_PAX_SIZE_OVERFLOW is not set +CONFIG_PAX_SIZE_OVERFLOW=y # CONFIG_PAX_LATENT_ENTROPY is not set # diff --git a/libre/linux-libre-grsec/config.x86_64 b/libre/linux-libre-grsec/config.x86_64 index e97911510..a1afbacc7 100644 --- a/libre/linux-libre-grsec/config.x86_64 +++ b/libre/linux-libre-grsec/config.x86_64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 3.14.3-1 Kernel Configuration +# Linux/x86 3.14.4.201405271114-1 Kernel Configuration # CONFIG_64BIT=y CONFIG_X86_64=y @@ -6063,7 +6063,6 @@ CONFIG_RCU_CPU_STALL_TIMEOUT=60 # CONFIG_NOTIFIER_ERROR_INJECTION is not set # CONFIG_FAULT_INJECTION is not set CONFIG_ARCH_HAS_DEBUG_STRICT_USER_COPY_CHECKS=y -# CONFIG_DEBUG_STRICT_USER_COPY_CHECKS is not set CONFIG_USER_STACKTRACE_SUPPORT=y CONFIG_NOP_TRACER=y CONFIG_HAVE_FUNCTION_TRACER=y @@ -6223,7 +6222,7 @@ CONFIG_PAX_MEMORY_STRUCTLEAK=y CONFIG_PAX_REFCOUNT=y CONFIG_PAX_USERCOPY=y # CONFIG_PAX_USERCOPY_DEBUG is not set -# CONFIG_PAX_SIZE_OVERFLOW is not set +CONFIG_PAX_SIZE_OVERFLOW=y # CONFIG_PAX_LATENT_ENTROPY is not set # @@ -6235,6 +6234,7 @@ CONFIG_GRKERNSEC_JIT_HARDEN=y CONFIG_GRKERNSEC_PERF_HARDEN=y CONFIG_GRKERNSEC_RAND_THREADSTACK=y CONFIG_GRKERNSEC_PROC_MEMMAP=y +CONFIG_GRKERNSEC_KSTACKOVERFLOW=y CONFIG_GRKERNSEC_BRUTE=y CONFIG_GRKERNSEC_MODHARDEN=y CONFIG_GRKERNSEC_HIDESYM=y -- cgit v1.2.3