From 80320907d4f76ffd14b21a08671f387e4e2dbc0a Mon Sep 17 00:00:00 2001 From: Ben Hutchings Date: Thu, 17 Mar 2016 01:25:23 +0000 Subject: [PATCH] grsecurity: Kconfig integration Kconfig integration changes extracted from Grsecurity, with help strings changed to make it clear that is not the real thing. Subsequent patches will add to the empty menu. Gbp-Pq: Topic features/all/grsecurity Gbp-Pq: Name grsecurity-kconfig.patch --- grsecurity/Kconfig | 3 +++ security/Kconfig | 22 ++++++++++++++++++++++ 2 files changed, 25 insertions(+) create mode 100644 grsecurity/Kconfig diff --git a/grsecurity/Kconfig b/grsecurity/Kconfig new file mode 100644 index 000000000000..193d20992d2b --- /dev/null +++ b/grsecurity/Kconfig @@ -0,0 +1,3 @@ +# +# grecurity configuration +# diff --git a/security/Kconfig b/security/Kconfig index e45237897b43..a4f1d8495e9c 100644 --- a/security/Kconfig +++ b/security/Kconfig @@ -4,6 +4,28 @@ menu "Security options" +menu "Hardening features (from Grsecurity)" + +config GRKERNSEC + bool "Hardening features (from Grsecurity)" + select DEBUG_KERNEL + select DEBUG_LIST + help + If you say Y here, you will be able to configure many features + that will enhance the security of your system. It is highly + recommended that you say Y here and read through the help + for each option so that you fully understand the features and + can evaluate their usefulness for your machine. + +menu "Customize Configuration" +depends on GRKERNSEC + +source grsecurity/Kconfig + +endmenu + +endmenu + source security/keys/Kconfig config SECURITY_DMESG_RESTRICT -- 2.30.2