Grsecurity with Colin Kolivas CK patches...

[willjcroz]

Hi all,

I am trying to combine the excellent features of grsecurity with a 2.6.14.3 kernel already patched with Colin Kolivas CK (ck6) interactivity patches.

The patch seems to go ok apart from a hunk in include/linux/sysctl.h it seems that grsecurity is after registering a sysctl KERN_GRSECURITY=71 while the ck patch has already nabbed it as KERN_INTERACTIVE=71. Can anyone tell me what these numbers represent - if I were to adjust it for example so that KERN_GRSECURITY=75 would I have to edit other files to reflect this change? Is this a good idea doing this? Has anyone else tried this combination?

Any help much appreciated,

Regards,

Will

[PaX Team]

Can anyone tell me what these numbers represent - if I were to adjust it for example so that KERN_GRSECURITY=75 would I have to edit other files to reflect this change?

pick any number, nothing else needs to change, the rest of the code uses the symbolic name.