Commit 0e4ee10b by Alexander Popov

Update KSPP recommendations

parent f83f1220
# CONFIGs
# Linux/arm 4.20.0 Kernel Configuration
# Linux/arm 5.4.0 Kernel Configuration
# Report BUG() conditions and kill the offending process.
CONFIG_BUG=y
......
# CONFIGs
# Linux/arm64 4.20.0 Kernel Configuration
# Linux/arm64 5.4.0 Kernel Configuration
# Report BUG() conditions and kill the offending process.
CONFIG_BUG=y
......
# CONFIGs
# Linux/i386 4.20.0 Kernel Configuration
# Linux/i386 5.4.0 Kernel Configuration
# Report BUG() conditions and kill the offending process.
CONFIG_BUG=y
......@@ -165,3 +165,10 @@ CONFIG_DEFAULT_MMAP_MIN_ADDR=65536
# Randomize position of kernel.
CONFIG_RANDOMIZE_BASE=y
# Enable Kernel Page Table Isolation to remove an entire class of cache timing side-channels.
CONFIG_PAGE_TABLE_ISOLATION=y
# Don't allow for 16-bit program emulation and associated LDT tricks.
# CONFIG_MODIFY_LDT_SYSCALL is not set
# CONFIGs
# Linux/x86_64 4.20.0 Kernel Configuration
# Linux/x86_64 5.4.0 Kernel Configuration
# Report BUG() conditions and kill the offending process.
CONFIG_BUG=y
......@@ -149,8 +149,7 @@ CONFIG_GCC_PLUGIN_STACKLEAK=y
# use with caution or also use CONFIG_GCC_PLUGIN_RANDSTRUCT_PERFORMANCE=y
CONFIG_GCC_PLUGIN_RANDSTRUCT=y
#x86_64
# x86_64
# Full 64-bit means PAE and NX bit.
CONFIG_X86_64=y
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment