grsec, notworking.

board/coreboot/linux-4.1-grsec.config

@@ -488,6 +488,8 @@ CONFIG_SECCOMP=y
 CONFIG_HZ_1000=y
 CONFIG_HZ=1000
 CONFIG_SCHED_HRTICK=y
+CONFIG_KEXEC=y
+# CONFIG_KEXEC_FILE is not set
 CONFIG_CRASH_DUMP=y
 CONFIG_PHYSICAL_START=0x1000000
 CONFIG_RELOCATABLE=y
@@ -507,6 +509,7 @@ CONFIG_USE_PERCPU_NUMA_NODE_ID=y
 #
 CONFIG_SUSPEND=y
 CONFIG_SUSPEND_FREEZER=y
+# CONFIG_HIBERNATION is not set
 CONFIG_PM_SLEEP=y
 CONFIG_PM_SLEEP_SMP=y
 # CONFIG_PM_AUTOSLEEP is not set
@@ -1564,6 +1567,7 @@ CONFIG_UNIX98_PTYS=y
 # CONFIG_N_GSM is not set
 # CONFIG_TRACE_SINK is not set
 CONFIG_DEVMEM=y
+CONFIG_DEVKMEM=y
 
 #
 # Serial drivers
@@ -1606,6 +1610,7 @@ CONFIG_TCG_TIS=y
 # CONFIG_TCG_CRB is not set
 # CONFIG_TCG_TIS_ST33ZP24 is not set
 # CONFIG_TELCLOCK is not set
+CONFIG_DEVPORT=y
 # CONFIG_XILLYBUS is not set
 
 #
@@ -3278,7 +3283,7 @@ CONFIG_PROBE_EVENTS=y
 # CONFIG_SAMPLES is not set
 CONFIG_HAVE_ARCH_KGDB=y
 # CONFIG_KGDB is not set
-CONFIG_STRICT_DEVMEM=y
+# CONFIG_STRICT_DEVMEM is not set
 CONFIG_X86_VERBOSE_BOOTUP=y
 CONFIG_EARLY_PRINTK=y
 CONFIG_EARLY_PRINTK_DBGP=y
@@ -3343,8 +3348,8 @@ CONFIG_PAX=y
 #
 # PaX Control
 #
-# CONFIG_PAX_SOFTMODE is not set
-# CONFIG_PAX_EI_PAX is not set
+CONFIG_PAX_SOFTMODE=y
+CONFIG_PAX_EI_PAX=y
 CONFIG_PAX_PT_PAX_FLAGS=y
 # CONFIG_PAX_XATTR_PAX_FLAGS is not set
 # CONFIG_PAX_NO_ACL_FLAGS is not set
@@ -3390,7 +3395,7 @@ CONFIG_PAX_LATENT_ENTROPY=y
 #
 # Memory Protections
 #
-CONFIG_GRKERNSEC_KMEM=y
+# CONFIG_GRKERNSEC_KMEM is not set
 # CONFIG_GRKERNSEC_IO is not set
 CONFIG_GRKERNSEC_BPF_HARDEN=y
 CONFIG_GRKERNSEC_PERF_HARDEN=y
@@ -3454,7 +3459,7 @@ CONFIG_GRKERNSEC_CHROOT_INITRD=y
 # CONFIG_GRKERNSEC_AUDIT_MOUNT is not set
 # CONFIG_GRKERNSEC_SIGNAL is not set
 # CONFIG_GRKERNSEC_FORKFAIL is not set
-CONFIG_GRKERNSEC_TIME=y
+# CONFIG_GRKERNSEC_TIME is not set
 CONFIG_GRKERNSEC_PROC_IPADDR=y
 CONFIG_GRKERNSEC_RWXMAP_LOG=y