From b78bc292e2218661a3b70163ec30711c87100941 Mon Sep 17 00:00:00 2001 From: heftig Date: Thu, 31 Dec 2020 01:18:17 +0000 Subject: [PATCH] Enable SECURITY_DMESG_RESTRICT Default on Debian, and seems to be reasonable for us since we also don't allow access to the system journal by default. git-svn-id: file:///srv/repos/svn-packages/svn@405138 eb2447ed-0c53-47e4-bac8-5bc4a241df78 --- trunk/PKGBUILD | 2 +- trunk/config | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/trunk/PKGBUILD b/trunk/PKGBUILD index 47d4163c3d38..17f331d0bcca 100644 --- a/trunk/PKGBUILD +++ b/trunk/PKGBUILD @@ -25,7 +25,7 @@ validpgpkeys=( 'A2FF3A36AAA56654109064AB19802F8B0D70FC30' # Jan Alexander Steffens (heftig) ) sha256sums=('SKIP' - '7e0c92e110045ae4af377d8a234b171d3732280bd973b3b304e054ee604e8e9e') + '7dd327c5d557b4d860676481f3b5f1c35d5335a53a0604f0289b7b02a4f54423') export KBUILD_BUILD_HOST=archlinux export KBUILD_BUILD_USER=$pkgbase diff --git a/trunk/config b/trunk/config index d185ab40ebea..d58bbcc8a9c6 100644 --- a/trunk/config +++ b/trunk/config @@ -9329,7 +9329,7 @@ CONFIG_TRUSTED_KEYS=m CONFIG_ENCRYPTED_KEYS=m CONFIG_KEY_DH_OPERATIONS=y CONFIG_KEY_NOTIFICATIONS=y -# CONFIG_SECURITY_DMESG_RESTRICT is not set +CONFIG_SECURITY_DMESG_RESTRICT=y CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y