Skip to content

Commit

Permalink
Fix for Mozilla software with hardened kernel
Browse files Browse the repository at this point in the history
Turn on CONFIG_GRKERNSEC_OLD_ARM_USERLAND; without this Mozilla software
such as firefox will segfault.

See e.g. https://forums.grsecurity.net/viewtopic.php?f=3&t=4479

This patch is not required for unhardened kernels (those without the
Grsecurity patchset applied).
  • Loading branch information
sakaki- committed Sep 19, 2016
1 parent cbfcd8f commit 7de43ca
Showing 1 changed file with 18 additions and 0 deletions.
18 changes: 18 additions & 0 deletions 1101-novena_defconfig-enable-minimal-GRKERNSEC.patch
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
(sakaki: minimal config to support old ARM userland in a hardened kernel; if)
(we don't do this, Mozilla software like firefox will segfault)
(see e.g. https://forums.grsecurity.net/viewtopic.php?f=3&t=4479)
(this patch is not needed in an unhardened kernel)
---
diff a/arch/arm/configs/novena_defconfig b/arch/arm/configs/novena_defconfig
--- a/arch/arm/configs/novena_defconfig
+++ b/arch/arm/configs/novena_defconfig
@@ -5367,3 +5367,6 @@
# CONFIG_SG_SPLIT is not set
CONFIG_ARCH_HAS_SG_CHAIN=y
# CONFIG_VIRTUALIZATION is not set
+CONFIG_GRKERNSEC=y
+CONFIG_GRKERNSEC_CONFIG_CUSTOM=y
+CONFIG_GRKERNSEC_OLD_ARM_USERLAND=y
--
2.7.3

0 comments on commit 7de43ca

Please sign in to comment.