Skip to content

K
kernel-hardening-checker
Commit 2b70c5e5 by Alexander Popov
Options

Add RODATA_FULL_DEFAULT_ENABLED for ARM64

parent 4f9c6539
Showing with 1 additions and 0 deletions
kconfig-hardened-check.py
...@@ -192,6 +192,7 @@ def construct_checklist(checklist, arch): ...@@ -192,6 +192,7 @@ def construct_checklist(checklist, arch):
if debug_mode or arch == 'ARM64': if debug_mode or arch == 'ARM64':
checklist.append(OptCheck('UNMAP_KERNEL_AT_EL0', 'y', 'defconfig', 'self_protection')) checklist.append(OptCheck('UNMAP_KERNEL_AT_EL0', 'y', 'defconfig', 'self_protection'))
checklist.append(OptCheck('HARDEN_EL2_VECTORS', 'y', 'defconfig', 'self_protection')) checklist.append(OptCheck('HARDEN_EL2_VECTORS', 'y', 'defconfig', 'self_protection'))
checklist.append(OptCheck('RODATA_FULL_DEFAULT_ENABLED', 'y', 'defconfig', 'self_protection'))
if debug_mode or arch == 'X86_64' or arch == 'ARM64': if debug_mode or arch == 'X86_64' or arch == 'ARM64':
checklist.append(OptCheck('VMAP_STACK', 'y', 'defconfig', 'self_protection')) checklist.append(OptCheck('VMAP_STACK', 'y', 'defconfig', 'self_protection'))
if debug_mode or arch == 'X86_64' or arch == 'ARM64' or arch == 'X86_32': if debug_mode or arch == 'X86_64' or arch == 'ARM64' or arch == 'X86_32':
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment