From 1680fdcf046d8a876fc038fe913a536bcb1f253c Mon Sep 17 00:00:00 2001 From: Olav Haugan Date: Wed, 24 May 2017 10:21:41 -0700 Subject: defconfig: msmcortex: Enable hardened user copy Hardened user copy provides an extra layer of security checks when copy_to_user/copy_from_user APIs are used to ensure data accesses are valid. When invalid accesses are detected the kernel will forcibly crash. Change-Id: Ia0529c67da84017ea91a72427db008737d3c5dbd Signed-off-by: Olav Haugan --- arch/arm64/configs/msmcortex-perf_defconfig | 1 + arch/arm64/configs/msmcortex_defconfig | 1 + 2 files changed, 2 insertions(+) (limited to 'arch') diff --git a/arch/arm64/configs/msmcortex-perf_defconfig b/arch/arm64/configs/msmcortex-perf_defconfig index 6ee2f4003574..6f5be663140f 100644 --- a/arch/arm64/configs/msmcortex-perf_defconfig +++ b/arch/arm64/configs/msmcortex-perf_defconfig @@ -639,6 +639,7 @@ CONFIG_CORESIGHT_QPDI=y CONFIG_CORESIGHT_SOURCE_DUMMY=y CONFIG_PFK=y CONFIG_SECURITY=y +CONFIG_HARDENED_USERCOPY=y CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SMACK=y CONFIG_CRYPTO_ECHAINIV=y diff --git a/arch/arm64/configs/msmcortex_defconfig b/arch/arm64/configs/msmcortex_defconfig index bbe23b823b5d..f09a134a2fd5 100644 --- a/arch/arm64/configs/msmcortex_defconfig +++ b/arch/arm64/configs/msmcortex_defconfig @@ -715,6 +715,7 @@ CONFIG_CORESIGHT_QPDI=y CONFIG_CORESIGHT_SOURCE_DUMMY=y CONFIG_PFK=y CONFIG_SECURITY=y +CONFIG_HARDENED_USERCOPY=y CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SMACK=y CONFIG_CRYPTO_ECHAINIV=y -- cgit v1.2.3