]> git.ipfire.org Git - ipfire-3.x.git/blobdiff - kernel/config-x86_64-default
kernel: Remove grsecurity patchset
[ipfire-3.x.git] / kernel / config-x86_64-default
index beaf5cad3f589e0a8002513705d0c5ec0500d0b1..46b274976889812ded396c16eb797609982c54cd 100644 (file)
@@ -31,6 +31,7 @@ CONFIG_RCU_USER_QS=y
 CONFIG_CONTEXT_TRACKING_FORCE=y
 CONFIG_RCU_FANOUT=64
 CONFIG_ARCH_SUPPORTS_NUMA_BALANCING=y
+CONFIG_ARCH_SUPPORTS_INT128=y
 # CONFIG_NUMA_BALANCING is not set
 
 #
@@ -62,6 +63,7 @@ CONFIG_GART_IOMMU=y
 CONFIG_SWIOTLB=y
 CONFIG_IOMMU_HELPER=y
 # CONFIG_MAXSMP is not set
+CONFIG_X86_ESPFIX64=y
 CONFIG_X86_VSYSCALL_EMULATION=y
 CONFIG_X86_DIRECT_GBPAGES=y
 CONFIG_NUMA=y
@@ -220,24 +222,7 @@ CONFIG_KASAN_SHADOW_OFFSET=0xdffffc0000000000
 # CONFIG_IOMMU_DEBUG is not set
 
 #
-# Grsecurity
-#
-CONFIG_PAX_KERNEXEC_PLUGIN=y
-CONFIG_TASK_SIZE_MAX_SHIFT=42
-
-#
-# Non-executable pages
-#
-CONFIG_PAX_KERNEXEC_PLUGIN_METHOD_BTS=y
-CONFIG_PAX_KERNEXEC_PLUGIN_METHOD="bts"
-
-#
-# Memory Protections
-#
-CONFIG_GRKERNSEC_KSTACKOVERFLOW=y
-
-#
-# Logging Options
+# Security options
 #
 CONFIG_INTEL_TXT=y