- updated for new features.

Changed files:
    kernel-grsec.config -> 1.22
    kernel-netfilter.config -> 1.24

diff --git a/kernel-grsec.config b/kernel-grsec.config
index decc59fdc89b21be3bfe6c2b7f718e1a54e59677..60be91d31eee58ae1dc76e4ef843decaed334cce 100644 (file)
--- a/kernel-grsec.config
+++ b/kernel-grsec.config
@@ -156,3 +156,9 @@ CONFIG_GRKERNSEC_FLOODBURST=4
 CONFIG_GRKERNSEC_MEM=y
 CONFIG_GRKERNSEC_ACL_HIDEKERN=y
 CONFIG_GRKERNSEC_RESLOG=y
+# CONFIG_GRKERNSEC_IO is not set
+CONFIG_GRKERNSEC_ACL_MAXTRIES=3
+CONFIG_GRKERNSEC_ACL_TIMEOUT=30
+# CONFIG_GRKERNSEC_CHROOT_SHMAT is not set
+CONFIG_GRKERNSEC_CHROOT_UNIX=y
+

diff --git a/kernel-netfilter.config b/kernel-netfilter.config
index a80f4f26273d47e9b1464d9df41f96201a7615c2..63bff8aabb51bb5e8820157328954be5cc2dd832 100644 (file)
--- a/kernel-netfilter.config
+++ b/kernel-netfilter.config
@@ -118,3 +118,6 @@ CONFIG_IP_NF_MATCH_FUZZY=m
 CONFIG_IP_NF_QUAKE3=m
 CONFIG_IP_NF_MMS=m
 CONFIG_IP_NF_MATCH_CONDITION=m
+CONFIG_IP_NF_TARGET_TARPIT=m
+CONFIG_IP6_NF_MATCH_HL=m
+CONFIG_IP6_NF_TARGET_HL=m