Re: Re: [gentoo-dev] New item for sys-kernel/hardened-sources removal

Am 16.08.2017 16:46 schrieb Michael Orlitzky:
> There is one thing you have to watch out for: certain vanilla kernel
> hardened features were subjugated to grsecurity ones and you'll 
> probably
> want to enable them. For example, you probably want CONFIG_VMAP_STACK
> once you've switched, but it won't be enabled in your old .config
> because it conflicts with GRKERNSEC_KSTACKOVERFLOW.
> 
> (It would help to collect those options on a wiki page?)

http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings

That probably covers all relevant options on a vanilla kernel.