2018-01-22 22:04:36 -05:00
|
|
|
|
|
|
|
|
# disable some pax and grsecurity features so that debootstrap will work
|
|
|
|
|
# this should be removed later
|
|
|
|
|
|
|
|
|
|
kernel.grsecurity.chroot_caps = 0
|
|
|
|
|
kernel.grsecurity.chroot_deny_chmod = 0
|
|
|
|
|
kernel.grsecurity.chroot_deny_mknod = 0
|
|
|
|
|
kernel.grsecurity.chroot_deny_mount = 0
|
2018-06-28 18:30:55 -04:00
|
|
|
kernel.grsecurity.chroot_deny_pivot = 0
|
2019-01-05 22:34:33 -05:00
|
|
|
|
|
|
|
|
# Chrome/Chromium sandbox won't work without this
|
|
|
|
|
kernel.grsecurity.chroot_deny_fchdir = 0
|
|
|
|
|
|
2018-01-22 22:04:36 -05:00
|
|
|
kernel.pax.softmode = 1
|
