spec: make pax plugin support configurable

Signed-off-by: David Sterba <dsterba@suse.cz>
Add grsecurity-3.0-3.13.3-201402152204.patch

Signed-off-by: David Sterba <dsterba@suse.cz>
series.conf: enable grsec

Signed-off-by: David Sterba <dsterba@suse.cz>
Add patch to remove grsec localversion

Signed-off-by: David Sterba <dsterba@suse.cz>
Refresh grsec patch

Signed-off-by: David Sterba <dsterba@suse.cz>
Refresh config/x86_64/grsec_desktop

Signed-off-by: David Sterba <dsterba@suse.cz>
Refresh config/x86_64/grsec_server

Signed-off-by: David Sterba <dsterba@suse.cz>
Refresh config/i386/grsec_desktop

Signed-off-by: David Sterba <dsterba@suse.cz>
Refresh config/i386/grsec_server

Signed-off-by: David Sterba <dsterba@suse.cz>
Set CONFIG_GRKERNSEC_PROC_GID to 10

group wheel

Signed-off-by: David Sterba <dsterba@suse.cz>
Disable CONFIG_GRKERNSEC_TPE

Signed-off-by: David Sterba <dsterba@suse.cz>
Disable PAX_EI_PAX and PAX_PT_PAX_FLAGS

Signed-off-by: David Sterba <dsterba@suse.cz>
Set CONFIG_PAX_NO_ACL_FLAGS

Signed-off-by: David Sterba <dsterba@suse.cz>
Set CONFIG_PAX_KERNEXEC_PLUGIN_METHOD_OR on x86_64/desktop

Signed-off-by: David Sterba <dsterba@suse.cz>
Set CONFIG_GRKERNSEC_ACL_HIDEKERN

Signed-off-by: David Sterba <dsterba@suse.cz>
Disable CONFIG_GRKERNSEC_SYSFS_RESTRICT

Too restrictive for now.

Signed-off-by: David Sterba <dsterba@suse.cz>
Set CONFIG_GRKERNSEC_AUDIT_PTRACE

Signed-off-by: David Sterba <dsterba@suse.cz>
Set CONFIG_GRKERNSEC_AUDIT_MOUNT

Signed-off-by: David Sterba <dsterba@suse.cz>
Set CONFIG_GRKERNSEC_FORKFAIL

Signed-off-by: David Sterba <dsterba@suse.cz>
Add armv6hl configs

Set CONFIG_GRKERNSEC_PROC_GID to 10
Disable CONFIG_GRKERNSEC_TPE
Disable PAX_EI_PAX and PAX_PT_PAX_FLAGS
Set CONFIG_PAX_NO_ACL_FLAGS
Set CONFIG_GRKERNSEC_ACL_HIDEKERN
Disable CONFIG_GRKERNSEC_SYSFS_RESTRICT
Set CONFIG_GRKERNSEC_AUDIT_PTRACE
Set CONFIG_GRKERNSEC_AUDIT_MOUNT
Set CONFIG_GRKERNSEC_FORKFAIL

Signed-off-by: David Sterba <dsterba@suse.cz>