Grsecurity with Colin Kolivas CK patches...
Posted: Thu Dec 01, 2005 7:07 am
Hi all,
I am trying to combine the excellent features of grsecurity with a 2.6.14.3 kernel already patched with Colin Kolivas CK (ck6) interactivity patches.
The patch seems to go ok apart from a hunk in include/linux/sysctl.h it seems that grsecurity is after registering a sysctl KERN_GRSECURITY=71 while the ck patch has already nabbed it as KERN_INTERACTIVE=71. Can anyone tell me what these numbers represent - if I were to adjust it for example so that KERN_GRSECURITY=75 would I have to edit other files to reflect this change? Is this a good idea doing this? Has anyone else tried this combination?
Any help much appreciated,
Regards,
Will
I am trying to combine the excellent features of grsecurity with a 2.6.14.3 kernel already patched with Colin Kolivas CK (ck6) interactivity patches.
The patch seems to go ok apart from a hunk in include/linux/sysctl.h it seems that grsecurity is after registering a sysctl KERN_GRSECURITY=71 while the ck patch has already nabbed it as KERN_INTERACTIVE=71. Can anyone tell me what these numbers represent - if I were to adjust it for example so that KERN_GRSECURITY=75 would I have to edit other files to reflect this change? Is this a good idea doing this? Has anyone else tried this combination?
Any help much appreciated,
Regards,
Will