Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1661007
| From | Amit Pundir <amit.pundir@linaro.org> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | [PATCH 4/9] config: android-recommended: enable CONFIG_CPU_SW_DOMAIN_PAN |
| Date | 2017-06-08 12:00 +0200 |
| Message-ID | <tQ2op-2Ex-7@gated-at.bofh.it> (permalink) |
| References | <tQ2op-2Ex-3@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
From: Sami Tolvanen <samitolvanen@google.com>
Enable CPU domain PAN to ensure that normal kernel accesses are
unable to access userspace addresses.
Reviewed-at: https://android-review.googlesource.com/#/c/334035/
Signed-off-by: Sami Tolvanen <samitolvanen@google.com>
[AmitP: cherry-picked this change from Android common kernel, updated
the commit message and re-placed the CONFIG_STRICT_KERNEL_RWX
config in sorted order]
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
---
kernel/configs/android-recommended.config | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/kernel/configs/android-recommended.config b/kernel/configs/android-recommended.config
index a02c447769f7..946fb92418f7 100644
--- a/kernel/configs/android-recommended.config
+++ b/kernel/configs/android-recommended.config
@@ -14,7 +14,7 @@ CONFIG_BLK_DEV_RAM=y
CONFIG_BLK_DEV_RAM_SIZE=8192
CONFIG_CC_STACKPROTECTOR_STRONG=y
CONFIG_COMPACTION=y
-CONFIG_STRICT_KERNEL_RWX=y
+CONFIG_CPU_SW_DOMAIN_PAN=y
CONFIG_DM_CRYPT=y
CONFIG_DM_UEVENT=y
CONFIG_DM_VERITY=y
@@ -107,6 +107,7 @@ CONFIG_SCHEDSTATS=y
CONFIG_SMARTJOYPLUS_FF=y
CONFIG_SND=y
CONFIG_SOUND=y
+CONFIG_STRICT_KERNEL_RWX=y
CONFIG_SUSPEND_TIME=y
CONFIG_TABLET_USB_ACECAD=y
CONFIG_TABLET_USB_AIPTEK=y
--
2.7.4
Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
[PATCH 0/9] kernel/configs: Android config fragment updates Amit Pundir <amit.pundir@linaro.org> - 2017-06-08 12:00 +0200
[PATCH 4/9] config: android-recommended: enable CONFIG_CPU_SW_DOMAIN_PAN Amit Pundir <amit.pundir@linaro.org> - 2017-06-08 12:00 +0200
[PATCH 8/9] config: android-base: add CGROUP_BPF Amit Pundir <amit.pundir@linaro.org> - 2017-06-08 12:00 +0200
[PATCH 9/9] config: android-base: disable CONFIG_NFSD and CONFIG_NFS_FS Amit Pundir <amit.pundir@linaro.org> - 2017-06-08 12:00 +0200
[PATCH 1/9] config: android-recommended: enable fstack-protector-strong Amit Pundir <amit.pundir@linaro.org> - 2017-06-08 12:00 +0200
[PATCH 5/9] config: android-base: add CONFIG_IKCONFIG option Amit Pundir <amit.pundir@linaro.org> - 2017-06-08 12:00 +0200
[PATCH 7/9] config: android-base: enable CONFIG_INET_DIAG_DESTROY Amit Pundir <amit.pundir@linaro.org> - 2017-06-08 12:00 +0200
Re: [PATCH 7/9] config: android-base: enable CONFIG_INET_DIAG_DESTROY Lorenzo Colitti <lorenzo@google.com> - 2017-06-08 12:10 +0200
Re: [PATCH 7/9] config: android-base: enable CONFIG_INET_DIAG_DESTROY Amit Pundir <amit.pundir@linaro.org> - 2017-06-08 12:40 +0200
[PATCH 6/9] config: android-base: add CONFIG_MODULES option Amit Pundir <amit.pundir@linaro.org> - 2017-06-08 12:00 +0200
[PATCH 2/9] config: android-recommended: enable CONFIG_ARM64_SW_TTBR0_PAN Amit Pundir <amit.pundir@linaro.org> - 2017-06-08 12:00 +0200
csiph-web