Update the admincd config for hardened-sources instead of gentoo-sources.
svn path=/trunk/; revision=806
This commit is contained in:
Jorge Manuel B. S. Vicetto
parent
59ec048f16
commit
a4a1b1bf0b
|
|
@ -1,6 +1,6 @@
|
|||
#
|
||||
# Automatically generated make config: don't edit
|
||||
# Linux/x86_64 3.0.3-gentoo Kernel Configuration
|
||||
# Linux/x86_64 3.0.3-hardened Kernel Configuration
|
||||
#
|
||||
CONFIG_64BIT=y
|
||||
# CONFIG_X86_32 is not set
|
||||
|
|
@ -156,10 +156,9 @@ CONFIG_PERF_EVENTS=y
|
|||
# CONFIG_DEBUG_PERF_USE_VMALLOC is not set
|
||||
CONFIG_VM_EVENT_COUNTERS=y
|
||||
CONFIG_PCI_QUIRKS=y
|
||||
CONFIG_COMPAT_BRK=y
|
||||
# CONFIG_COMPAT_BRK is not set
|
||||
CONFIG_SLAB=y
|
||||
# CONFIG_SLUB is not set
|
||||
# CONFIG_SLOB is not set
|
||||
# CONFIG_PROFILING is not set
|
||||
CONFIG_HAVE_OPROFILE=y
|
||||
# CONFIG_KPROBES is not set
|
||||
|
|
@ -369,7 +368,6 @@ CONFIG_PHYSICAL_START=0x1000000
|
|||
CONFIG_RELOCATABLE=y
|
||||
CONFIG_PHYSICAL_ALIGN=0x1000000
|
||||
CONFIG_HOTPLUG_CPU=y
|
||||
# CONFIG_COMPAT_VDSO is not set
|
||||
# CONFIG_CMDLINE_BOOL is not set
|
||||
CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG=y
|
||||
|
||||
|
|
@ -419,7 +417,6 @@ CONFIG_CPU_FREQ_TABLE=m
|
|||
CONFIG_CPU_FREQ_STAT=m
|
||||
# CONFIG_CPU_FREQ_STAT_DETAILS is not set
|
||||
CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE=y
|
||||
# CONFIG_CPU_FREQ_DEFAULT_GOV_POWERSAVE is not set
|
||||
# CONFIG_CPU_FREQ_DEFAULT_GOV_USERSPACE is not set
|
||||
# CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND is not set
|
||||
# CONFIG_CPU_FREQ_DEFAULT_GOV_CONSERVATIVE is not set
|
||||
|
|
@ -605,7 +602,6 @@ CONFIG_VLAN_8021Q=m
|
|||
# CONFIG_ATALK is not set
|
||||
# CONFIG_X25 is not set
|
||||
# CONFIG_LAPB is not set
|
||||
# CONFIG_ECONET is not set
|
||||
# CONFIG_WAN_ROUTER is not set
|
||||
# CONFIG_PHONET is not set
|
||||
# CONFIG_IEEE802154 is not set
|
||||
|
|
@ -674,7 +670,6 @@ CONFIG_MAC80211=m
|
|||
CONFIG_MAC80211_HAS_RC=y
|
||||
CONFIG_MAC80211_RC_MINSTREL=y
|
||||
CONFIG_MAC80211_RC_MINSTREL_HT=y
|
||||
# CONFIG_MAC80211_RC_DEFAULT_PID is not set
|
||||
CONFIG_MAC80211_RC_DEFAULT_MINSTREL=y
|
||||
CONFIG_MAC80211_RC_DEFAULT="minstrel_ht"
|
||||
# CONFIG_MAC80211_MESH is not set
|
||||
|
|
@ -1587,7 +1582,6 @@ CONFIG_UNIX98_PTYS=y
|
|||
CONFIG_NOZOMI=m
|
||||
# CONFIG_N_GSM is not set
|
||||
# CONFIG_TRACE_SINK is not set
|
||||
CONFIG_DEVKMEM=y
|
||||
|
||||
#
|
||||
# Serial drivers
|
||||
|
|
@ -1636,9 +1630,6 @@ CONFIG_HW_RANDOM_AMD=y
|
|||
CONFIG_HW_RANDOM_VIA=y
|
||||
CONFIG_HW_RANDOM_VIRTIO=m
|
||||
CONFIG_NVRAM=m
|
||||
CONFIG_RTC=m
|
||||
CONFIG_GEN_RTC=m
|
||||
CONFIG_GEN_RTC_X=y
|
||||
# CONFIG_R3964 is not set
|
||||
# CONFIG_APPLICOM is not set
|
||||
|
||||
|
|
@ -1655,7 +1646,6 @@ CONFIG_MWAVE=m
|
|||
# CONFIG_HANGCHECK_TIMER is not set
|
||||
# CONFIG_TCG_TPM is not set
|
||||
# CONFIG_TELCLOCK is not set
|
||||
CONFIG_DEVPORT=y
|
||||
# CONFIG_RAMOOPS is not set
|
||||
CONFIG_I2C=m
|
||||
CONFIG_I2C_BOARDINFO=y
|
||||
|
|
@ -2009,7 +1999,6 @@ CONFIG_DUMMY_CONSOLE=y
|
|||
CONFIG_FRAMEBUFFER_CONSOLE=y
|
||||
# CONFIG_FRAMEBUFFER_CONSOLE_DETECT_PRIMARY is not set
|
||||
# CONFIG_FRAMEBUFFER_CONSOLE_ROTATION is not set
|
||||
# CONFIG_FB_CON_DECOR is not set
|
||||
# CONFIG_FONTS is not set
|
||||
CONFIG_FONT_8x8=y
|
||||
CONFIG_FONT_8x16=y
|
||||
|
|
@ -2033,8 +2022,6 @@ CONFIG_SND_MIXER_OSS=m
|
|||
CONFIG_SND_PCM_OSS=m
|
||||
CONFIG_SND_PCM_OSS_PLUGINS=y
|
||||
CONFIG_SND_SEQUENCER_OSS=y
|
||||
CONFIG_SND_RTCTIMER=m
|
||||
CONFIG_SND_SEQ_RTCTIMER_DEFAULT=y
|
||||
CONFIG_SND_DYNAMIC_MINORS=y
|
||||
CONFIG_SND_SUPPORT_OLD_API=y
|
||||
# CONFIG_SND_VERBOSE_PROCFS is not set
|
||||
|
|
@ -2442,7 +2429,68 @@ CONFIG_INFINIBAND_IPOIB_DEBUG=y
|
|||
CONFIG_INFINIBAND_SRP=m
|
||||
CONFIG_INFINIBAND_ISER=m
|
||||
# CONFIG_EDAC is not set
|
||||
# CONFIG_RTC_CLASS is not set
|
||||
CONFIG_RTC_LIB=y
|
||||
CONFIG_RTC_CLASS=y
|
||||
CONFIG_RTC_HCTOSYS=y
|
||||
CONFIG_RTC_HCTOSYS_DEVICE="rtc0"
|
||||
# CONFIG_RTC_DEBUG is not set
|
||||
|
||||
#
|
||||
# RTC interfaces
|
||||
#
|
||||
CONFIG_RTC_INTF_SYSFS=y
|
||||
CONFIG_RTC_INTF_PROC=y
|
||||
CONFIG_RTC_INTF_DEV=y
|
||||
# CONFIG_RTC_INTF_DEV_UIE_EMUL is not set
|
||||
# CONFIG_RTC_DRV_TEST is not set
|
||||
|
||||
#
|
||||
# I2C RTC drivers
|
||||
#
|
||||
# CONFIG_RTC_DRV_DS1307 is not set
|
||||
# CONFIG_RTC_DRV_DS1374 is not set
|
||||
# CONFIG_RTC_DRV_DS1672 is not set
|
||||
# CONFIG_RTC_DRV_DS3232 is not set
|
||||
# CONFIG_RTC_DRV_MAX6900 is not set
|
||||
# CONFIG_RTC_DRV_RS5C372 is not set
|
||||
# CONFIG_RTC_DRV_ISL1208 is not set
|
||||
# CONFIG_RTC_DRV_ISL12022 is not set
|
||||
# CONFIG_RTC_DRV_X1205 is not set
|
||||
# CONFIG_RTC_DRV_PCF8563 is not set
|
||||
# CONFIG_RTC_DRV_PCF8583 is not set
|
||||
# CONFIG_RTC_DRV_M41T80 is not set
|
||||
# CONFIG_RTC_DRV_BQ32K is not set
|
||||
# CONFIG_RTC_DRV_S35390A is not set
|
||||
# CONFIG_RTC_DRV_FM3130 is not set
|
||||
# CONFIG_RTC_DRV_RX8581 is not set
|
||||
# CONFIG_RTC_DRV_RX8025 is not set
|
||||
# CONFIG_RTC_DRV_EM3027 is not set
|
||||
# CONFIG_RTC_DRV_RV3029C2 is not set
|
||||
|
||||
#
|
||||
# SPI RTC drivers
|
||||
#
|
||||
|
||||
#
|
||||
# Platform RTC drivers
|
||||
#
|
||||
CONFIG_RTC_DRV_CMOS=y
|
||||
# CONFIG_RTC_DRV_DS1286 is not set
|
||||
# CONFIG_RTC_DRV_DS1511 is not set
|
||||
# CONFIG_RTC_DRV_DS1553 is not set
|
||||
# CONFIG_RTC_DRV_DS1742 is not set
|
||||
# CONFIG_RTC_DRV_STK17TA8 is not set
|
||||
# CONFIG_RTC_DRV_M48T86 is not set
|
||||
# CONFIG_RTC_DRV_M48T35 is not set
|
||||
# CONFIG_RTC_DRV_M48T59 is not set
|
||||
# CONFIG_RTC_DRV_MSM6242 is not set
|
||||
# CONFIG_RTC_DRV_BQ4802 is not set
|
||||
# CONFIG_RTC_DRV_RP5C01 is not set
|
||||
# CONFIG_RTC_DRV_V3020 is not set
|
||||
|
||||
#
|
||||
# on-CPU RTC drivers
|
||||
#
|
||||
CONFIG_DMADEVICES=y
|
||||
# CONFIG_DMADEVICES_DEBUG is not set
|
||||
|
||||
|
|
@ -2488,7 +2536,6 @@ CONFIG_XEN_GRANT_DEV_ALLOC=m
|
|||
CONFIG_XEN_PLATFORM_PCI=m
|
||||
CONFIG_SWIOTLB_XEN=y
|
||||
# CONFIG_STAGING is not set
|
||||
# CONFIG_MACH_NO_WESTBRIDGE is not set
|
||||
CONFIG_X86_PLATFORM_DEVICES=y
|
||||
CONFIG_ACER_WMI=m
|
||||
# CONFIG_ACERHDF is not set
|
||||
|
|
@ -2642,9 +2689,7 @@ CONFIG_NTFS_FS=y
|
|||
# Pseudo filesystems
|
||||
#
|
||||
CONFIG_PROC_FS=y
|
||||
# CONFIG_PROC_KCORE is not set
|
||||
CONFIG_PROC_SYSCTL=y
|
||||
CONFIG_PROC_PAGE_MONITOR=y
|
||||
CONFIG_SYSFS=y
|
||||
CONFIG_TMPFS=y
|
||||
CONFIG_TMPFS_POSIX_ACL=y
|
||||
|
|
@ -2840,7 +2885,6 @@ CONFIG_RCU_CPU_STALL_TIMEOUT=60
|
|||
# CONFIG_DEBUG_PER_CPU_MAPS is not set
|
||||
# CONFIG_CPU_NOTIFIER_ERROR_INJECT is not set
|
||||
# CONFIG_FAULT_INJECTION is not set
|
||||
# CONFIG_LATENCYTOP is not set
|
||||
# CONFIG_SYSCTL_SYSCALL_CHECK is not set
|
||||
# CONFIG_DEBUG_PAGEALLOC is not set
|
||||
CONFIG_USER_STACKTRACE_SUPPORT=y
|
||||
|
|
@ -2875,15 +2919,12 @@ CONFIG_HAVE_ARCH_KGDB=y
|
|||
# CONFIG_KGDB is not set
|
||||
CONFIG_HAVE_ARCH_KMEMCHECK=y
|
||||
# CONFIG_TEST_KSTRTOX is not set
|
||||
# CONFIG_STRICT_DEVMEM is not set
|
||||
CONFIG_STRICT_DEVMEM=y
|
||||
CONFIG_X86_VERBOSE_BOOTUP=y
|
||||
CONFIG_EARLY_PRINTK=y
|
||||
# CONFIG_EARLY_PRINTK_DBGP is not set
|
||||
# CONFIG_DEBUG_STACKOVERFLOW is not set
|
||||
# CONFIG_X86_PTDUMP is not set
|
||||
CONFIG_DEBUG_RODATA=y
|
||||
# CONFIG_DEBUG_RODATA_TEST is not set
|
||||
# CONFIG_DEBUG_SET_MODULE_RONX is not set
|
||||
# CONFIG_DEBUG_NX_TEST is not set
|
||||
# CONFIG_IOMMU_DEBUG is not set
|
||||
# CONFIG_IOMMU_STRESS is not set
|
||||
|
|
@ -2904,6 +2945,150 @@ CONFIG_DEFAULT_IO_DELAY_TYPE=0
|
|||
#
|
||||
# Security options
|
||||
#
|
||||
|
||||
#
|
||||
# Grsecurity
|
||||
#
|
||||
CONFIG_GRKERNSEC=y
|
||||
# CONFIG_GRKERNSEC_LOW is not set
|
||||
# CONFIG_GRKERNSEC_MEDIUM is not set
|
||||
# CONFIG_GRKERNSEC_HIGH is not set
|
||||
CONFIG_GRKERNSEC_HARDENED_SERVER=y
|
||||
# CONFIG_GRKERNSEC_HARDENED_WORKSTATION is not set
|
||||
# CONFIG_GRKERNSEC_HARDENED_VIRTUALIZATION is not set
|
||||
# CONFIG_GRKERNSEC_CUSTOM is not set
|
||||
|
||||
#
|
||||
# Address Space Protection
|
||||
#
|
||||
CONFIG_GRKERNSEC_KMEM=y
|
||||
CONFIG_GRKERNSEC_IO=y
|
||||
CONFIG_GRKERNSEC_PROC_MEMMAP=y
|
||||
CONFIG_GRKERNSEC_BRUTE=y
|
||||
CONFIG_GRKERNSEC_MODHARDEN=y
|
||||
CONFIG_GRKERNSEC_HIDESYM=y
|
||||
# CONFIG_GRKERNSEC_KERN_LOCKOUT is not set
|
||||
|
||||
#
|
||||
# Role Based Access Control Options
|
||||
#
|
||||
# CONFIG_GRKERNSEC_NO_RBAC is not set
|
||||
# CONFIG_GRKERNSEC_ACL_HIDEKERN is not set
|
||||
CONFIG_GRKERNSEC_ACL_MAXTRIES=3
|
||||
CONFIG_GRKERNSEC_ACL_TIMEOUT=30
|
||||
|
||||
#
|
||||
# Filesystem Protections
|
||||
#
|
||||
CONFIG_GRKERNSEC_PROC=y
|
||||
CONFIG_GRKERNSEC_PROC_USERGROUP=y
|
||||
CONFIG_GRKERNSEC_PROC_GID=10
|
||||
CONFIG_GRKERNSEC_PROC_ADD=y
|
||||
CONFIG_GRKERNSEC_LINK=y
|
||||
CONFIG_GRKERNSEC_FIFO=y
|
||||
# CONFIG_GRKERNSEC_SYSFS_RESTRICT is not set
|
||||
# CONFIG_GRKERNSEC_ROFS is not set
|
||||
CONFIG_GRKERNSEC_CHROOT=y
|
||||
CONFIG_GRKERNSEC_CHROOT_MOUNT=y
|
||||
CONFIG_GRKERNSEC_CHROOT_DOUBLE=y
|
||||
CONFIG_GRKERNSEC_CHROOT_PIVOT=y
|
||||
CONFIG_GRKERNSEC_CHROOT_CHDIR=y
|
||||
CONFIG_GRKERNSEC_CHROOT_CHMOD=y
|
||||
CONFIG_GRKERNSEC_CHROOT_FCHDIR=y
|
||||
CONFIG_GRKERNSEC_CHROOT_MKNOD=y
|
||||
CONFIG_GRKERNSEC_CHROOT_SHMAT=y
|
||||
CONFIG_GRKERNSEC_CHROOT_UNIX=y
|
||||
CONFIG_GRKERNSEC_CHROOT_FINDTASK=y
|
||||
CONFIG_GRKERNSEC_CHROOT_NICE=y
|
||||
CONFIG_GRKERNSEC_CHROOT_SYSCTL=y
|
||||
CONFIG_GRKERNSEC_CHROOT_CAPS=y
|
||||
|
||||
#
|
||||
# Kernel Auditing
|
||||
#
|
||||
# CONFIG_GRKERNSEC_AUDIT_GROUP is not set
|
||||
# CONFIG_GRKERNSEC_EXECLOG is not set
|
||||
CONFIG_GRKERNSEC_RESLOG=y
|
||||
# CONFIG_GRKERNSEC_CHROOT_EXECLOG is not set
|
||||
# CONFIG_GRKERNSEC_AUDIT_PTRACE is not set
|
||||
# CONFIG_GRKERNSEC_AUDIT_CHDIR is not set
|
||||
CONFIG_GRKERNSEC_AUDIT_MOUNT=y
|
||||
CONFIG_GRKERNSEC_SIGNAL=y
|
||||
CONFIG_GRKERNSEC_FORKFAIL=y
|
||||
CONFIG_GRKERNSEC_TIME=y
|
||||
CONFIG_GRKERNSEC_PROC_IPADDR=y
|
||||
CONFIG_GRKERNSEC_RWXMAP_LOG=y
|
||||
# CONFIG_GRKERNSEC_AUDIT_TEXTREL is not set
|
||||
|
||||
#
|
||||
# Executable Protections
|
||||
#
|
||||
CONFIG_GRKERNSEC_EXECVE=y
|
||||
CONFIG_GRKERNSEC_DMESG=y
|
||||
CONFIG_GRKERNSEC_HARDEN_PTRACE=y
|
||||
# CONFIG_GRKERNSEC_TPE is not set
|
||||
|
||||
#
|
||||
# Network Protections
|
||||
#
|
||||
CONFIG_GRKERNSEC_RANDNET=y
|
||||
# CONFIG_GRKERNSEC_BLACKHOLE is not set
|
||||
# CONFIG_GRKERNSEC_SOCKET is not set
|
||||
|
||||
#
|
||||
# Sysctl support
|
||||
#
|
||||
CONFIG_GRKERNSEC_SYSCTL=y
|
||||
# CONFIG_GRKERNSEC_SYSCTL_DISTRO is not set
|
||||
CONFIG_GRKERNSEC_SYSCTL_ON=y
|
||||
|
||||
#
|
||||
# Logging Options
|
||||
#
|
||||
CONFIG_GRKERNSEC_FLOODTIME=10
|
||||
CONFIG_GRKERNSEC_FLOODBURST=4
|
||||
|
||||
#
|
||||
# PaX
|
||||
#
|
||||
CONFIG_TASK_SIZE_MAX_SHIFT=47
|
||||
CONFIG_PAX=y
|
||||
|
||||
#
|
||||
# PaX Control
|
||||
#
|
||||
# CONFIG_PAX_SOFTMODE is not set
|
||||
CONFIG_PAX_EI_PAX=y
|
||||
CONFIG_PAX_PT_PAX_FLAGS=y
|
||||
# CONFIG_PAX_NO_ACL_FLAGS is not set
|
||||
CONFIG_PAX_HAVE_ACL_FLAGS=y
|
||||
# CONFIG_PAX_HOOK_ACL_FLAGS is not set
|
||||
|
||||
#
|
||||
# Non-executable pages
|
||||
#
|
||||
CONFIG_PAX_NOEXEC=y
|
||||
CONFIG_PAX_PAGEEXEC=y
|
||||
# CONFIG_PAX_EMUTRAMP is not set
|
||||
CONFIG_PAX_MPROTECT=y
|
||||
# CONFIG_PAX_MPROTECT_COMPAT is not set
|
||||
# CONFIG_PAX_ELFRELOCS is not set
|
||||
|
||||
#
|
||||
# Address Space Layout Randomization
|
||||
#
|
||||
CONFIG_PAX_ASLR=y
|
||||
# CONFIG_PAX_RANDKSTACK is not set
|
||||
CONFIG_PAX_RANDUSTACK=y
|
||||
CONFIG_PAX_RANDMMAP=y
|
||||
|
||||
#
|
||||
# Miscellaneous hardening features
|
||||
#
|
||||
CONFIG_PAX_MEMORY_SANITIZE=y
|
||||
# CONFIG_PAX_MEMORY_STACKLEAK is not set
|
||||
CONFIG_PAX_REFCOUNT=y
|
||||
CONFIG_PAX_USERCOPY=y
|
||||
CONFIG_KEYS=y
|
||||
# CONFIG_KEYS_DEBUG_PROC_KEYS is not set
|
||||
# CONFIG_SECURITY_DMESG_RESTRICT is not set
|
||||
|
|
@ -2984,7 +3169,7 @@ CONFIG_CRYPTO_MICHAEL_MIC=m
|
|||
# CONFIG_CRYPTO_RMD256 is not set
|
||||
# CONFIG_CRYPTO_RMD320 is not set
|
||||
CONFIG_CRYPTO_SHA1=m
|
||||
CONFIG_CRYPTO_SHA256=m
|
||||
CONFIG_CRYPTO_SHA256=y
|
||||
CONFIG_CRYPTO_SHA512=m
|
||||
CONFIG_CRYPTO_TGR192=m
|
||||
CONFIG_CRYPTO_WP512=m
|
||||
|
|
|
|||
Loading…
Reference in a new issue