Mail archive
alpine-devel

Re: [alpine-devel] [PATCH] testing/linux-virt-grsec

From: <deant_at_hawaii.rr.com>
Date: Thu, 26 Jul 2012 2:54:54 +0000

---- Natanael Copa <ncopa_at_alpinelinux.org> wrote:
> On Tue, 24 Jul 2012 0:18:15 +0000
> <deant_at_hawaii.rr.com> wrote:
>
> > Attached patch reduces some of the differences between
> > main/linux-grsec/kernelconfig.x86 and
> > testing/linux-virt-grsec/kernelconfig.x86, hopefully without breaking
> > anything for anyone else.
>
> I am not sure we want them to be similar. The idea of linux-virt-grsec
> is to have a kernel that is as small as possible and is optimized for
> virtual environments.

Ok. Try this kernel config patch;

CONFIG_NETFILTER_XT_TARGET_LOG is needed for shorewall's logging
and CONFIG_SCSI_VIRTIO is a new virtual machine driver.

--- /boot/config-3.4.5-grsec
+++ kernelconfig.x86
_at_@ -730,7 +730,7 @@
 CONFIG_NETFILTER_XT_TARGET_DSCP=m
 CONFIG_NETFILTER_XT_TARGET_HL=m
 CONFIG_NETFILTER_XT_TARGET_IDLETIMER=m
-# CONFIG_NETFILTER_XT_TARGET_LOG is not set
+CONFIG_NETFILTER_XT_TARGET_LOG=m
 CONFIG_NETFILTER_XT_TARGET_MARK=m
 CONFIG_NETFILTER_XT_TARGET_NFLOG=m
 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m
_at_@ -1311,7 +1311,7 @@
 # CONFIG_SCSI_PM8001 is not set
 # CONFIG_SCSI_SRP is not set
 # CONFIG_SCSI_BFA_FC is not set
-# CONFIG_SCSI_VIRTIO is not set
+CONFIG_SCSI_VIRTIO=m
 CONFIG_SCSI_DH=m
 CONFIG_SCSI_DH_RDAC=m
 CONFIG_SCSI_DH_HP_SW=m





---
Unsubscribe:  alpine-devel+unsubscribe_at_lists.alpinelinux.org
Help:         alpine-devel+help_at_lists.alpinelinux.org
---
Received on Thu Jul 26 2012 - 02:54:54 GMT