grsecurity: enable ability to lock in readonly mounts

This commit is contained in:
Joachim Fasting 2016-12-05 23:55:40 +01:00
parent 0e765c72e5
commit cc396697a6
No known key found for this signature in database
GPG key ID: 7544761007FE4E08

View file

@ -30,6 +30,7 @@ PAX_KERNEXEC_PLUGIN_METHOD_BTS y
# Additional grsec hardening not implied by auto constraints
GRKERNSEC_IO y
GRKERNSEC_SYSFS_RESTRICT y
GRKERNSEC_ROFS y
GRKERNSEC_MODHARDEN y