grsecurity: support non-enforcing mode

Until we've made sure that most things actually work out of the box, we
need to give people a way of continuing to use the system without
completely disabling grsecurity.

Set sysctl kernel.pax.softmode=1 or boot with pax.softmode=1
This commit is contained in:
Joachim Fasting 2016-08-16 14:03:40 +02:00
parent bab8a2ebe3
commit 3fcb9e6f57
No known key found for this signature in database
GPG key ID: 7544761007FE4E08

View file

@ -13,6 +13,8 @@ GRKERNSEC_CONFIG_VIRT_EPT y
GRKERNSEC_CONFIG_VIRT_KVM y
GRKERNSEC_CONFIG_PRIORITY_SECURITY y
PAX_SOFTMODE y
PAX_PT_PAX_FLAGS y
PAX_XATTR_PAX_FLAGS y
PAX_EI_PAX n