kernel: enable grsecurity on rpi kernel.

This commit is contained in:
Arne Fitzenreiter
2013-12-08 16:03:25 +01:00
parent 342a91ae25
commit 8a2cf24a1f
2 changed files with 160 additions and 13 deletions

View File

@@ -26,7 +26,7 @@ include Config
VER = 3.10.22
RPI_PATCHES = linux-3.10.10-c1af7c6
RPI_PATCHES = linux-3.10.10-grsec-c1af7c6
GRS_PATCHES = grsecurity-2.9.1-3.10.22-ipfire1.patch.xz
THISAPP = linux-$(VER)
@@ -75,7 +75,7 @@ rpi-patches-$(RPI_PATCHES).patch.xz = $(URL_IPFIRE)/rpi-patches-$(RPI_PATCHES).p
$(GRS_PATCHES) = $(URL_IPFIRE)/$(GRS_PATCHES)
$(DL_FILE)_MD5 = d2b030e809d0f03d2d6ddfcc5108d641
rpi-patches-$(RPI_PATCHES).patch.xz_MD5 = ef9274b3ff5d05daaaa4bdbe86ad00fc
rpi-patches-$(RPI_PATCHES).patch.xz_MD5 = f55981853573236069db5ad9fb7a4bd9
$(GRS_PATCHES)_MD5 = 2fe9cf094b9069918f66b2b1895431eb
install : $(TARGET)
@@ -122,11 +122,11 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
# Grsecurity-patches
ifneq "$(KCFG)" "-headers"
ifneq "$(KCFG)" "-rpi"
#ifneq "$(KCFG)" "-rpi"
cd $(DIR_APP) && xz -c -d $(DIR_DL)/$(GRS_PATCHES) | patch -Np1
cd $(DIR_APP) && rm localversion-grsec
cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux-3.7-disable-compat_vdso.patch
endif
#endif
endif
# Disable pcspeaker autoload