Qubes workstation kernel config · freedomofpress/ansible-role-grsecurity-build@55998eb · GitHub

This repository has been archived by the owner on Mar 30, 2021. It is now read-only.

Commit

Qubes workstation kernel config

Browse files

The config was obtained with the following steps:
* Start with latest 4.9.0-6-rt-amd64 from the Debian stretch repos
* Make olddefconfig to populate with defaults for 4.14.52
* Make menuconfig and set grsecurity on, priority security, enable XEN guest options with PVH/HVM
* Add qubes group (GID 999) to `CONFIG_GRKERNSEC_PROC_GID` as to not break Qubes' qvm-copy-to-vm functionality.

Loading branch information

emkll authored and Conor Schaefer committed Jul 27, 2018

1 parent c2c82c8 commit 55998eb