[gentoo-commits] proj/hardened-docs:master commit in: xml/

["Matthew Thode" <mthode@mthode.org>]

commit:     23dda4bdfebfe697e5dca3dcac505d705a5c71c9
Author:     Matthew Thode <mthode <AT> mthode <DOT> org>
AuthorDate: Tue Apr  5 18:26:50 2011 +0000
Commit:     Matthew Thode <mthode <AT> mthode <DOT> org>
CommitDate: Tue Apr  5 18:26:50 2011 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-docs.git;a=commit;h=23dda4bd

added a table to the hardened-virt guide for kernel options on guests

---
 xml/hardened-virtualization.xml |   23 +++++++++++++++++++++++
 1 files changed, 23 insertions(+), 0 deletions(-)

diff --git a/xml/hardened-virtualization.xml b/xml/hardened-virtualization.xml
index 606c6fd..916b798 100644
--- a/xml/hardened-virtualization.xml
+++ b/xml/hardened-virtualization.xml
@@ -83,6 +83,29 @@ virtio, with all hardening features, including CONFIG_PAX_KERNEXEC and
 CONFIG_PAX_MEMORY_UDEREF, have been successfull.
 </p>
 
+<table>
+	<tr>
+		<th>guest kerel config breakout</th>
+	</tr>
+	<tr>
+		<th rowspan=2></th>
+		<th colspan=2>CPU</th>
+		<th>AMD</th>
+		<th>INTEL</th>
+	</tr>
+	<tr>
+		<th>CONFIG_PAX_KERNEXEC</th>
+		<ti>Y</ti>
+		<ti>Y</ti>
+	</tr>
+	<tr>
+		<th>CONFIG_PAX_MEMORY_UDEREF</th>
+		<ti>Y</ti>
+		<ti>N</ti>
+	</tr>   
+</table>
+
+
 <p>
 For the host, however, one must disable both CONFIG_PAX_KERNEXEC and
 CONFIG_PAX_MEMORY_UDEREF. Either of these will set an invisible kernel