Commit 5d007e67 by Alexander Popov

Don't mention LKDTM

I can't recommend disabling it, because LKDTM is used to test the kernel
hardening features.

But I cant recommend enabling it, because LKDTM contains intentional
memory corruption errors. It's not for production systems.

So let's simply drop the comment about LKDTM.
parent 0d5c56f2
...@@ -639,8 +639,6 @@ def add_kconfig_checks(l, arch): ...@@ -639,8 +639,6 @@ def add_kconfig_checks(l, arch):
if arch in ('X86_32', 'ARM'): if arch in ('X86_32', 'ARM'):
l += [KconfigCheck('harden_userspace', 'my', 'ARCH_MMAP_RND_BITS', '16')] l += [KconfigCheck('harden_userspace', 'my', 'ARCH_MMAP_RND_BITS', '16')]
# l += [KconfigCheck('feature_test', 'my', 'LKDTM', 'm')] # only for debugging!
def add_cmdline_checks(l, arch): def add_cmdline_checks(l, arch):
# Calling the CmdlineCheck class constructor: # Calling the CmdlineCheck class constructor:
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment