Move VMSPLIT_3G to 'userspace_hardening'

CONFIG_VMSPLIT_3G=y is for maximal userspace memory area and maximal ASLR. It works both for ARM and X86_32.

Move VMSPLIT_3G to 'userspace_hardening'
CONFIG_VMSPLIT_3G=y is for maximal userspace memory area and maximal ASLR. It works both for ARM and X86_32.
b06c8cd9 · Alexander Popov · c936e092 · b06c8cd9
Commit b06c8cd9 authored Mar 18, 2020 by Alexander Popov
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletions

kconfig-hardened-check.py kconfig-hardened-check.py +2 -1

No files found.
--- a/kconfig-hardened-check.py
+++ b/kconfig-hardened-check.py
@@ -264,7 +264,6 @@ def construct_checklist(checklist, arch):
        checklist.append(OptCheck('RANDOMIZE_BASE',              'y', 'defconfig', 'self_protection'))
        checklist.append(OptCheck('THREAD_INFO_IN_TASK',         'y', 'defconfig', 'self_protection'))
    if arch == 'ARM':
-        checklist.append(OptCheck('VMSPLIT_3G',                  'y', 'defconfig', 'self_protection'))
        checklist.append(OptCheck('CPU_SW_DOMAIN_PAN',           'y', 'defconfig', 'self_protection'))
        checklist.append(OptCheck('STACKPROTECTOR_PER_TASK',     'y', 'defconfig', 'self_protection'))
    if arch == 'ARM64' or arch == 'ARM':
@@ -436,6 +435,8 @@ def construct_checklist(checklist, arch):
    checklist.append(OptCheck('INTEGRITY',       'y', 'defconfig', 'userspace_hardening'))
    if arch == 'ARM64':
        checklist.append(OptCheck('ARM64_PTR_AUTH',       'y', 'defconfig', 'userspace_hardening'))
+    if arch == 'ARM' or  arch == 'X86_32':
+        checklist.append(OptCheck('VMSPLIT_3G',           'y', 'defconfig', 'userspace_hardening'))
    if arch == 'X86_64' or arch == 'ARM64':
        checklist.append(OptCheck('ARCH_MMAP_RND_BITS',   '32', 'clipos', 'userspace_hardening'))
    if arch == 'X86_32' or arch == 'ARM':