From: Ben Hutchings <ben@decadent.org.uk>
Date: Thu, 17 Mar 2016 01:25:23 +0000 (+0000)
Subject: grsecurity: Kconfig integration
X-Git-Tag: archive/raspbian/4.9.13-1+rpi1~53
X-Git-Url: https://dgit.raspbian.org/%22http:/www.example.com//%22stanciumarius94%40gmail.com/%22/%22http:/www.example.com/%22stanciumarius94%40gmail.com/%22?a=commitdiff_plain;h=80320907d4f76ffd14b21a08671f387e4e2dbc0a;p=linux-4.9.git

grsecurity: Kconfig integration

Kconfig integration changes extracted from Grsecurity, with help
strings changed to make it clear that is not the real thing.

Subsequent patches will add to the empty menu.


Gbp-Pq: Topic features/all/grsecurity
Gbp-Pq: Name grsecurity-kconfig.patch
---

diff --git a/grsecurity/Kconfig b/grsecurity/Kconfig
new file mode 100644
index 000000000000..193d20992d2b
--- /dev/null
+++ b/grsecurity/Kconfig
@@ -0,0 +1,3 @@
+#
+# grecurity configuration
+#
diff --git a/security/Kconfig b/security/Kconfig
index e45237897b43..a4f1d8495e9c 100644
--- a/security/Kconfig
+++ b/security/Kconfig
@@ -4,6 +4,28 @@
 
 menu "Security options"
 
+menu "Hardening features (from Grsecurity)"
+
+config GRKERNSEC
+	bool "Hardening features (from Grsecurity)"
+	select DEBUG_KERNEL
+	select DEBUG_LIST
+	help
+	  If you say Y here, you will be able to configure many features
+	  that will enhance the security of your system.  It is highly
+	  recommended that you say Y here and read through the help
+	  for each option so that you fully understand the features and
+	  can evaluate their usefulness for your machine.
+
+menu "Customize Configuration"
+depends on GRKERNSEC
+
+source grsecurity/Kconfig
+
+endmenu
+
+endmenu
+
 source security/keys/Kconfig
 
 config SECURITY_DMESG_RESTRICT