debian-packaging
/
linux
8
0
Fork 0
Code Releases Activity

security,printk: Enable SECURITY_DMESG_RESTRICT 

This prevents non-root users reading the kernel log by default (sysctl:
kernel.dmesg_restrict)
This commit is contained in:
Ben Hutchings 2016-10-07 02:57:54 +01:00
parent 298af9afcc
commit f3b836ba7c
2 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
debian/changelog vendored
View File

@ -19,6 +19,8 @@ linux (4.8-1~exp1) UNRELEASED; urgency=medium
* [powerpc*/*64*] Enable OPAL_PRD, MTD, MTD_POWERNV_FLASH as modules
(Closes: #838604, #838605)
* Compile with gcc-6 on all architectures
* security,printk: Enable SECURITY_DMESG_RESTRICT, preventing non-root users
reading the kernel log by default (sysctl: kernel.dmesg_restrict)
-- Ben Hutchings <ben@decadent.org.uk> Sat, 01 Oct 2016 21:51:33 +0100

1
debian/config/config vendored
View File

@ -6643,6 +6643,7 @@ CONFIG_NET_KEY_MIGRATE=y
##
## file: security/Kconfig
##
CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY_PERF_EVENTS_RESTRICT=y
CONFIG_SECURITY=y
CONFIG_SECURITY_NETWORK=y