Skip to content

Comments

grsecurity: add gradm, paxctl, and pax-utils#1765

Closed
thoughtpolice wants to merge 13 commits intoNixOS:masterfrom
thoughtpolice:grsec-tools
Closed

grsecurity: add gradm, paxctl, and pax-utils#1765
thoughtpolice wants to merge 13 commits intoNixOS:masterfrom
thoughtpolice:grsec-tools

Conversation

@thoughtpolice
Copy link
Member

This adds 3 packages you might typically want with a grsec deployment.

The pieces here basically overlap some of with #1187 (which I found after I wrote my own gradm package). This also installs the udev rules for gradm.

Unlike the work by @wizeman it doesn't attempt to properly mark JIT binaries via paxctl - it only adds the packages. But I think there's no reason to hold back the packages even without this.

And pax-utils is from the Hardened Gentoo project, and includes some useful utilities (like pspax).

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If you don't mind, could you move the meta section to the end of the derivation, as per convention?

@wizeman
Copy link
Member

wizeman commented Feb 17, 2014

Apart from the minor comments above, looks good to me!

bjornfor and others added 13 commits February 17, 2014 20:50
keybinder is a library for registering global keyboard shortcuts.
keybinder works with GTK-based applications using the X Window System.

https://github.com/engla/keybinder/
Add 'keybinder' and 'python-notify' as dependencies. Fixes this:

  $ terminator
  [...]
  Warning: python-keybinder is not installed. This means the hide_window shortcut will be unavailable
  [...]
  ActivityWatch plugin unavailable: please install python-notify
Align the package name with what other distros call it.

Other distros: Fedora, Debian, Archlinux, OpenSUSE, Mageia, Slackware
(and probably more).
Firmware uploader for the teensy microcontroller board family.
This also ensures the appropriate udev rules are installed.

Signed-off-by: Austin Seipp <[email protected]>
Signed-off-by: Austin Seipp <[email protected]>
Signed-off-by: Austin Seipp <[email protected]>
@thoughtpolice thoughtpolice deleted the grsec-tools branch February 18, 2014 05:15
@thoughtpolice thoughtpolice reopened this Feb 18, 2014
@thoughtpolice
Copy link
Member Author

WTF. GitHub somehow totally messed up my attempt to rebase all my changes... sigh. It looks like this PR is totally botched. I'll open a new one (sorry for the spam).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants