kernel: Re-enable capabilities in chroots.

[ipfire-3.x.git] / kernel / config-armv7hl-omap

diff --git a/kernel/config-armv7hl-omap b/kernel/config-armv7hl-omap
index 66aba75a6e65e94e06dd1d2d9031f51ca4546139..e2fc0999786f3da60b77f1518f065c7cae4fbe47 100644 (file)
--- a/kernel/config-armv7hl-omap
+++ b/kernel/config-armv7hl-omap
@@ -574,6 +574,21 @@ CONFIG_RCU_CPU_STALL_TIMEOUT=60
 # CONFIG_CPU_NOTIFIER_ERROR_INJECT is not set
 CONFIG_OC_ETM=y
 
+#
+# Kernel Auditing
+#
+CONFIG_GRKERNSEC_RWXMAP_LOG=y
+CONFIG_GRKERNSEC_AUDIT_TEXTREL=y
+
+#
+# Non-executable pages
+#
+CONFIG_PAX_NOEXEC=y
+CONFIG_PAX_PAGEEXEC=y
+CONFIG_PAX_MPROTECT=y
+# CONFIG_PAX_MPROTECT_COMPAT is not set
+CONFIG_PAX_ELFRELOCS=y
+
 #
 # Miscellaneous hardening features
 #