Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 1a35a8bd authored by Sachin Grover's avatar Sachin Grover Committed by Gerrit - the friendly Code Review server
Browse files

sdx_defconfig: add configs for enhancing security of kernel 



Add DEBUG_SET_MODULE_RONX, KERNMEM_PERMS and SHED_STACK_END_CHECK
for kernel memory, text, data and stack protection.

Change-Id: I4a80f5f3e535d10966517a2c16f73b7769046fe6
Signed-off-by: default avatarSachin Grover <sgrover@codeaurora.org>
parent 111bb652

arch/arm/configs/sdx-perf_defconfig

+3 −0
Original line number Diff line number Diff line
@@ -29,6 +29,7 @@ CONFIG_MODULE_FORCE_UNLOAD=y 
CONFIG_PARTITION_ADVANCED=y

CONFIG_ARCH_MSM=y

CONFIG_ARCH_SDX20=y

CONFIG_ARM_KERNMEM_PERMS=y

CONFIG_PCI_MSM=y

CONFIG_PREEMPT=y

CONFIG_AEABI=y
@@ -406,7 +407,9 @@ CONFIG_PANIC_TIMEOUT=5 
CONFIG_PANIC_ON_RECURSIVE_FAULT=y

# CONFIG_SCHED_DEBUG is not set

CONFIG_SCHEDSTATS=y

CONFIG_SCHED_STACK_END_CHECK=y

CONFIG_TIMER_STATS=y

# CONFIG_DEBUG_PREEMPT is not set

CONFIG_IPC_LOGGING=y

CONFIG_BLK_DEV_IO_TRACE=y

CONFIG_DEBUG_SET_MODULE_RONX=y

arch/arm/configs/sdx_defconfig

+3 −0
Original line number Diff line number Diff line
@@ -28,6 +28,7 @@ CONFIG_MODULE_FORCE_UNLOAD=y 
CONFIG_PARTITION_ADVANCED=y

CONFIG_ARCH_MSM=y

CONFIG_ARCH_SDX20=y

CONFIG_ARM_KERNMEM_PERMS=y

CONFIG_PCI_MSM=y

CONFIG_PREEMPT=y

CONFIG_AEABI=y
@@ -422,6 +423,7 @@ CONFIG_DEBUG_MEMORY_INIT=y 
CONFIG_PANIC_TIMEOUT=5

CONFIG_PANIC_ON_RECURSIVE_FAULT=y

CONFIG_SCHEDSTATS=y

CONFIG_SCHED_STACK_END_CHECK=y

CONFIG_TIMER_STATS=y

CONFIG_DEBUG_SPINLOCK=y

CONFIG_DEBUG_MUTEXES=y
@@ -435,3 +437,4 @@ CONFIG_MSM_RTB=y 
CONFIG_IPC_LOGGING=y

CONFIG_BLK_DEV_IO_TRACE=y

CONFIG_DEBUG_USER=y

CONFIG_DEBUG_SET_MODULE_RONX=y