--- /usr/src/linux-2.6.38-hardened-r1/.config 2011-04-29 12:03:31.866403379 +0800 +++ /usr/src/linux-2.6.38-hardened-r4/.config 2011-05-04 05:55:35.700813016 +0800 @@ -1,7 +1,7 @@ # # Automatically generated make config: don't edit -# Linux/x86_64 2.6.38-hardened-r1 Kernel Configuration -# Fri Apr 29 12:03:31 2011 +# Linux/x86_64 2.6.38-hardened-r4 Kernel Configuration +# Wed May 4 05:55:35 2011 # CONFIG_64BIT=y # CONFIG_X86_32 is not set @@ -2699,6 +2699,7 @@ # CONFIG_KGDB is not set CONFIG_HAVE_ARCH_KMEMCHECK=y # CONFIG_KMEMCHECK is not set +# CONFIG_TEST_KSTRTOX is not set CONFIG_STRICT_DEVMEM=y CONFIG_X86_VERBOSE_BOOTUP=y CONFIG_EARLY_PRINTK=y @@ -2737,9 +2738,6 @@ # CONFIG_GRKERNSEC_LOW is not set # CONFIG_GRKERNSEC_MEDIUM is not set # CONFIG_GRKERNSEC_HIGH is not set -# CONFIG_GRKERNSEC_HARDENED_SERVER is not set -# CONFIG_GRKERNSEC_HARDENED_WORKSTATION is not set -# CONFIG_GRKERNSEC_HARDENED_VIRTUALIZATION is not set CONFIG_GRKERNSEC_CUSTOM=y # @@ -2880,6 +2878,7 @@ # Miscellaneous hardening features # CONFIG_PAX_MEMORY_SANITIZE=y +CONFIG_PAX_MEMORY_STACKLEAK=y CONFIG_PAX_MEMORY_UDEREF=y CONFIG_PAX_REFCOUNT=y CONFIG_PAX_USERCOPY=y