Port and review changes to security settings

[eloquence]

@ageis has helpfully prepared a PR here:

freedomofpress/ansible-role-grsecurity#115

which significantly changes the kernel security settings. We'll need to port that PR to this repo, and review it here. This is time-sensitive, as we're hoping to QA a kernel with these new settings as part of the QA process for SecureDrop 0.7.1 (a patch-level SecureDrop release that ships a kernel update).

[conorsch]

Roger that. @ageis, if you're able to re-submit the PR over here, that's great. Otherwise, we can port your changes, setting the git author information to match.

[ageis]

I'll see what I can do in the next couple days here (at RightsCon), wasn't aware of the new repo. Just wanted to add that I asked Spender in order to confirm if there's any conflict with KSPP options and grsec and it's safe. https://twitter.com/grsecurity/status/996134403532378113

…

On Wed, May 16, 2018, 4:51 PM Conor Schaefer ***@***.***> wrote: Roger that. @ageis <https://github.com/ageis>, if you're able to re-submit the PR over here, that's great. Otherwise, we can port your changes, setting the git author information to match. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#33 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ABG5PN0I1U7TwYwyBYMWQKsihb6kCNoSks5tzJ9RgaJpZM4UCGHJ> .

[conorsch]

PR open at #34