grsecurity: Kconfig integration

Kconfig integration changes extracted from Grsecurity, with help
strings changed to make it clear that is not the real thing.

Subsequent patches will add to the empty menu.

Gbp-Pq: Topic features/all/grsecurity
Gbp-Pq: Name grsecurity-kconfig.patch

diff --git a/grsecurity/Kconfig b/grsecurity/Kconfig
new file mode 100644 (file)
index 0000000..193d209
--- /dev/null
+++ b/grsecurity/Kconfig
@@ -0,0 +1,3 @@
+#
+# grecurity configuration
+#

diff --git a/security/Kconfig b/security/Kconfig
index e45237897b435f8fbf64950f580b9730f79eb1f4..a4f1d8495e9cca0cbf8500d3a286de6f507e84e5 100644 (file)
--- a/security/Kconfig
+++ b/security/Kconfig
@@ -4,6 +4,28 @@
 
 menu "Security options"
 
+menu "Hardening features (from Grsecurity)"
+
+config GRKERNSEC
+       bool "Hardening features (from Grsecurity)"
+       select DEBUG_KERNEL
+       select DEBUG_LIST
+       help
+         If you say Y here, you will be able to configure many features
+         that will enhance the security of your system.  It is highly
+         recommended that you say Y here and read through the help
+         for each option so that you fully understand the features and
+         can evaluate their usefulness for your machine.
+
+menu "Customize Configuration"
+depends on GRKERNSEC
+
+source grsecurity/Kconfig
+
+endmenu
+
+endmenu
+
 source security/keys/Kconfig
 
 config SECURITY_DMESG_RESTRICT