spec: use grsec as a variant, copy i386, x86_64 and armv6hl configs

Copy distro configs to grsec flavors, unchanged.

Signed-off-by: David Sterba <dsterba@suse.cz>
rpm: update variant build

Signed-off-by: David Sterba <dsterba@suse.cz>
Build zImage for arm

Signed-off-by: David Sterba <dsterba@suse.cz>
series.conf: add grsec section anchor

Signed-off-by: David Sterba <dsterba@suse.cz>
Add patch to remove grsec localversion

Signed-off-by: David Sterba <dsterba@suse.cz>
Add grsec-remove-protected-paths.patch

Signed-off-by: David Sterba <dsterba@suse.cz>
Disable CONFIG_SPLIT_PACKAGE

Signed-off-by: David Sterba <dsterba@suse.cz>
Disable CONFIG_X86_X32, refresh configs

Signed-off-by: David Sterba <dsterba@suse.cz>
Update i386, x86_64 grsec configs

Signed-off-by: David Sterba <dsterba@suse.cz>
Set CONFIG_PAX_EMUTRAMP

"From: Anthony G. Basile <blueness@gentoo.org>

PAX_EMUTRAMP is needed for libffi to avoid RWX mmap-ings using PaX
emulation of trampolines.
We default PAX_EMUTRAMP='y' since almost all hardened users will want
this.

See bug:
 http://bugs.gentoo.org/show_bug.cgi?id=329499
 http://bugs.gentoo.org/show_bug.cgi?id=457194
"

Signed-off-by: David Sterba <dsterba@suse.cz>
Update armv6hl grsec configs

Signed-off-by: David Sterba <dsterba@suse.cz>
Disable lustre in arm config

breaks buid

Signed-off-by: David Sterba <dsterba@suse.cz>
Disable richacl patches

Signed-off-by: David Sterba <dsterba@suse.cz>
Disable overlayfs patches

Signed-off-by: David Sterba <dsterba@suse.cz>
Reduce patch conflict surface

Signed-off-by: David Sterba <dsterba@suse.cz>
Disable support patches

Signed-off-by: David Sterba <dsterba@suse.cz>
Auto-refresh configs

Signed-off-by: David Sterba <dsterba@suse.cz>