Package: gradm2 / 3.1~201701031918-2

Metadata

Package Version Patches format
gradm2 3.1~201701031918-2 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
01 do_not_conflict_with_gradm.patch | (download)

Makefile | 4 2 + 2 - 0 !
gradm_analyze.c | 12 6 + 6 - 0 !
gradm_defs.h | 6 3 + 3 - 0 !
policy | 28 14 + 14 - 0 !
4 files changed, 25 insertions(+), 25 deletions(-)

 prevent previous conflict with gradm
 Previously gradm was in the archive, both administering grsecurity, but for
 2.4.x, 2.6.x+ and 3.x+ kernels. Carry on the naming, even when gradm is gone.
02 handle_nostrip_deb_build_options.patch | (download)

Makefile | 4 4 + 0 - 0 !
1 file changed, 4 insertions(+)

 if asked for nostrip in deb_build_options , honor that
 Do not strip the result binary, gradm2 if DEB_BUILD_OPTIONS asks for that.
10 build_with_fpic.patch | (download)

Makefile | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 add -fpic for hardening compilation
 .
11 do_not_empty_ldflags.patch | (download)

Makefile | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 do not empty ldflags to let hardening compilation
 Upstream clears LDFLAGS for an unknown reason, preventing hardened
 compilation. Disable this.
 .
12 use_CPPFLAGS_for_hardening.patch | (download)

Makefile | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 use cppflags in makefile
 Add CPPFLAGS to Makefile to build with hardening enabled.
15 update selinux path.patch | (download)

gradm_adm.c | 2 1 + 1 - 0 !
policy | 2 1 + 1 - 0 !
2 files changed, 2 insertions(+), 2 deletions(-)

 selinux path changed to /sys/fs/selinux
 Since Wheezy, the selinuxfs mountpoint is mounted under /sys/fs/selinux
 and not under /selinux anymore.
16 update udevadm path.patch | (download)

Makefile | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 update udevadm path
 udevadm is in /bin now, only a symlink exists in /sbin