aptenodytes: Enable protection sets via genpatches knobs
This commit is contained in:
parent
f227f48a40
commit
e3b813c39d
@ -2834,8 +2834,6 @@ CONFIG_SECURITYFS=y
|
|||||||
CONFIG_PAGE_TABLE_ISOLATION=y
|
CONFIG_PAGE_TABLE_ISOLATION=y
|
||||||
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
|
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
|
||||||
CONFIG_HARDENED_USERCOPY=y
|
CONFIG_HARDENED_USERCOPY=y
|
||||||
CONFIG_HARDENED_USERCOPY_FALLBACK=y
|
|
||||||
CONFIG_HARDENED_USERCOPY_PAGESPAN=y
|
|
||||||
CONFIG_FORTIFY_SOURCE=y
|
CONFIG_FORTIFY_SOURCE=y
|
||||||
# CONFIG_STATIC_USERMODEHELPER is not set
|
# CONFIG_STATIC_USERMODEHELPER is not set
|
||||||
CONFIG_DEFAULT_SECURITY_DAC=y
|
CONFIG_DEFAULT_SECURITY_DAC=y
|
||||||
@ -3435,12 +3433,12 @@ CONFIG_GENTOO_LINUX_INIT_SCRIPT=y
|
|||||||
#
|
#
|
||||||
# Enable Kernel Self Protection Project Recommendations
|
# Enable Kernel Self Protection Project Recommendations
|
||||||
#
|
#
|
||||||
# CONFIG_GENTOO_KERNEL_SELF_PROTECTION is not set
|
CONFIG_GENTOO_KERNEL_SELF_PROTECTION=y
|
||||||
|
|
||||||
#
|
#
|
||||||
# Architecture Specific Self Protection Project Recommendations
|
# Architecture Specific Self Protection Project Recommendations
|
||||||
#
|
#
|
||||||
# CONFIG_GENTOO_KERNEL_SELF_PROTECTION_X86_64 is not set
|
CONFIG_GENTOO_KERNEL_SELF_PROTECTION_X86_64=y
|
||||||
# end of Architecture Specific Self Protection Project Recommendations
|
# end of Architecture Specific Self Protection Project Recommendations
|
||||||
# end of Enable Kernel Self Protection Project Recommendations
|
# end of Enable Kernel Self Protection Project Recommendations
|
||||||
# end of Gentoo Linux
|
# end of Gentoo Linux
|
||||||
|
Loading…
x
Reference in New Issue
Block a user