diff options
| author | André Fabian Silva Delgado <emulatorman@parabola.nu> | 2014-07-27 14:23:21 -0300 |
|---|---|---|
| committer | André Fabian Silva Delgado <emulatorman@parabola.nu> | 2014-07-27 14:23:21 -0300 |
| commit | 101d891e1e20dfc47a7dc12f114dbb60a1403c3c (patch) | |
| tree | dfd9fff8968fe35d4c5ddae9541d6e5229a96d50 /libre/linux-libre-grsec/linux-libre-grsec.install | |
| parent | e8116f07470108729c24c9526c1398c8c57eb370 (diff) | |
linux-libre-grsec-3.15.6.201407232200-2: updating revision
* increase CONFIG_PAX_KERNEXEC_MODULE_TEXT to 12M for the i686 kernel
* enable CONFIG_PAX_MEMORY_UDEREF for the x86_64 kernel + add warning
Diffstat (limited to 'libre/linux-libre-grsec/linux-libre-grsec.install')
| -rw-r--r-- | libre/linux-libre-grsec/linux-libre-grsec.install | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/libre/linux-libre-grsec/linux-libre-grsec.install b/libre/linux-libre-grsec/linux-libre-grsec.install index 637577244..22a798dfa 100644 --- a/libre/linux-libre-grsec/linux-libre-grsec.install +++ b/libre/linux-libre-grsec/linux-libre-grsec.install @@ -4,6 +4,17 @@ KERNEL_NAME=-grsec KERNEL_VERSION= +_uderef_warning() { + if [[ $(uname -m) = x86_64 ]]; then + cat <<EOF +CONFIG_PAX_MEMORY_UDEREF is now enabled on x86_64 and can be disabled by +passing \`pax_nouderef\` on the kernel line. UDEREF's PCID support on Sandy +Bridge and later is known to have issues with recent kernel versions and can be +disabled by passing \`nopcid\` to use the legacy implementation. +EOF + fi +} + _add_groups() { if getent group tpe-trusted >/dev/null; then groupmod -g 200 -n tpe tpe-trusted @@ -54,6 +65,7 @@ post_install () { fi _add_groups + _uderef_warning } post_upgrade() { @@ -80,6 +92,10 @@ post_upgrade() { fi _add_groups + + if [[ $(vercmp $2 3.15.6.201407232200-2) -lt 0 ]]; then + _uderef_warning + fi } post_remove() { |