Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 4ba9d624 authored May 28, 2018 by Sachin Grover Committed by Gerrit - the friendly Code Review server Aug 19, 2018

defconfig: msm: Enable PAN emulation to harden security



Enable SW PAN emulation to prevent the kernel
from accessing user-space memory directly.

Change-Id: I7d9000fa4c77bffaada49f964fc240b4bc35b804
Signed-off-by: Sachin Grover <sgrover@codeaurora.org>

parent 111af389

arch/arm64/configs/msm8937-perf_defconfig

+1 −0

Original line number	Diff line number	Diff line
		@@ -72,6 +72,7 @@ CONFIG_ARMV8_DEPRECATED=y
		CONFIG_SWP_EMULATION=y
		CONFIG_CP15_BARRIER_EMULATION=y
		CONFIG_SETEND_EMULATION=y
		CONFIG_ARM64_SW_TTBR0_PAN=y
		# CONFIG_ARM64_VHE is not set
		CONFIG_RANDOMIZE_BASE=y
		CONFIG_BUILD_ARM64_APPENDED_DTB_IMAGE=y

arch/arm64/configs/msm8937_defconfig

+1 −0

Original line number	Diff line number	Diff line
		@@ -75,6 +75,7 @@ CONFIG_ARMV8_DEPRECATED=y
		CONFIG_SWP_EMULATION=y
		CONFIG_CP15_BARRIER_EMULATION=y
		CONFIG_SETEND_EMULATION=y
		CONFIG_ARM64_SW_TTBR0_PAN=y
		# CONFIG_ARM64_VHE is not set
		CONFIG_RANDOMIZE_BASE=y
		CONFIG_BUILD_ARM64_APPENDED_DTB_IMAGE=y