Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 30acd460 authored by Sachin Grover's avatar Sachin Grover Committed by Gerrit - the friendly Code Review server
Browse files

defconfig: Add Security config to enhance security 



Add HARDENED_USERCOPY AND Set loadable kernel module data
as NX and text as RO.

Change-Id: I100f09b8a6ffbc9658854bda6e34039c08ab1c3e
Signed-off-by: default avatarSachin Grover <sgrover@codeaurora.org>
parent bc46a78f

arch/arm/configs/sdxpoorwills-perf_defconfig

+2 −0
Original line number Diff line number Diff line
@@ -411,6 +411,7 @@ CONFIG_SCHED_STACK_END_CHECK=y 
# CONFIG_DEBUG_PREEMPT is not set

CONFIG_IPC_LOGGING=y

CONFIG_BLK_DEV_IO_TRACE=y

CONFIG_DEBUG_SET_MODULE_RONX=y

CONFIG_CORESIGHT=y

CONFIG_CORESIGHT_REMOTE_ETM=y

CONFIG_CORESIGHT_REMOTE_ETM_DEFAULT_ENABLE=0
@@ -422,6 +423,7 @@ CONFIG_CORESIGHT_EVENT=y 
CONFIG_CORESIGHT_HWEVENT=y

CONFIG_SECURITY=y

CONFIG_SECURITY_NETWORK=y

CONFIG_HARDENED_USERCOPY=y

CONFIG_SECURITY_SELINUX=y

# CONFIG_SECURITY_SELINUX_AVC_STATS is not set

CONFIG_CRYPTO_DEV_QCOM_MSM_QCE=y

arch/arm/configs/sdxpoorwills_defconfig

+2 −0
Original line number Diff line number Diff line
@@ -431,6 +431,7 @@ CONFIG_IRQSOFF_TRACER=y 
CONFIG_PREEMPT_TRACER=y

CONFIG_BLK_DEV_IO_TRACE=y

CONFIG_DEBUG_USER=y

CONFIG_DEBUG_SET_MODULE_RONX=y

CONFIG_CORESIGHT=y

CONFIG_CORESIGHT_LINK_AND_SINK_TMC=y

CONFIG_CORESIGHT_SOURCE_ETM3X=y
@@ -447,6 +448,7 @@ CONFIG_CORESIGHT_HWEVENT=y 
CONFIG_CORESIGHT_DUMMY=y

CONFIG_SECURITY=y

CONFIG_SECURITY_NETWORK=y

CONFIG_HARDENED_USERCOPY=y

CONFIG_SECURITY_SELINUX=y

# CONFIG_SECURITY_SELINUX_AVC_STATS is not set

CONFIG_CRYPTO_CMAC=y