Bug#722587: pbuilder: Please document grsecurity requirements

Helge Kreutzmann debian at helgefjell.de
Thu Sep 12 14:31:14 UTC 2013


Package: pbuilder
Version: 0.213
Severity: wishlist

For people using self built kernels using grsecurity it would be nice
if you could document the chroot settings necessary. I could not
readily find this by searching on the net (i.e. google) but rather by
infering other cases to mine and trying out config settings.

This information could go into README.Debian or one of the man pages.

Most of the chroot restrictions may be set, but the following two must
not be set, otherwiese pbuilder will die with an error:
# CONFIG_GRKERNSEC_CHROOT_MOUNT is not set
# CONFIG_GRKERNSEC_CHROOT_CAPS is not set

(Especially the last one was tricky)

-- System Information:
Debian Release: 7.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

-- debconf information excluded

-- 
      Dr. Helge Kreutzmann                     debian at helgefjell.de
           Dipl.-Phys.                   http://www.helgefjell.de/debian.php
        64bit GNU powered                     gpg signed mail preferred
           Help keep free software "libre": http://www.ffii.de/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 190 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pbuilder-maint/attachments/20130912/553d0711/attachment.sig>


More information about the Pbuilder-maint mailing list