Bug#605090: Updated patch

[Bastian Blank <waldi@debian.org>]

On Tue, Jan 18, 2011 at 06:32:50PM +0100, Yves-Alexis Perez wrote:
> Index: debian/config/i386/grsec/defines
> ===================================================================
> --- debian/config/i386/grsec/defines	(revision 0)
> +++ debian/config/i386/grsec/defines	(revision 0)
> @@ -0,0 +1,9 @@
> +[base]
> +flavours:
> + 686

No new non-pae image.

> + amd64

Why?

> +[grsec]
> +flavours:
> + i386
> + amd64

What is this?

> Index: debian/config/i386/defines
> ===================================================================
> --- debian/config/i386/defines	(revision 16824)
> +++ debian/config/i386/defines	(working copy)
> @@ -3,6 +3,7 @@
>   openvz
>   vserver
>   xen
> + grsec

This was a sorted list.

> Index: debian/config/featureset-grsec/config
> ===================================================================
> --- debian/config/featureset-grsec/config	(revision 0)
> +++ debian/config/featureset-grsec/config	(revision 0)
> @@ -0,0 +1,152 @@
> +# Disable XEN for UDEREF support
> +CONFIG_XEN=n

Nope. Disabling core stuff needs more information.

> Index: debian/config/featureset-grsec/defines
> ===================================================================
> --- debian/config/featureset-grsec/defines	(revision 0)
> +++ debian/config/featureset-grsec/defines	(revision 0)
> @@ -0,0 +1,8 @@
> +[description]
> +part-short-grsec: Grsecurity and PaX protection

This is already too long.

> +[image]
> +depends: linux-grsec-base,, paxctl

Why is paxctl necessary? Also syntax error.

> --- debian/config/amd64/grsec/config	(revision 0)
> +++ debian/config/amd64/grsec/config	(revision 0)
> @@ -0,0 +1,5 @@
> +#
> +# PaX
> +#
> +CONFIG_PAX_PER_CPU_PGD=y
> +CONFIG_TASK_SIZE_MAX_SHIFT=42

Remove, no real settings here.

Bastian

-- 
Mind your own business, Spock.  I'm sick of your halfbreed interference.