Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit dc1bb7c1 authored by Ramakrishna Gottimukkula's avatar Ramakrishna Gottimukkula
Browse files

defconfig: msm: Enable hardened user copy 



Hardened user copy provides an extra layer of security checks when
copy_to_user/copy_from_user APIs are used to ensure data accesses are
valid. When invalid accesses are detected the kernel will forcibly
crash.

Change-Id: I5686c2ecbc805a442e9ea67444c0a4b692e66c32
Signed-off-by: default avatarRamakrishna Gottimukkula <rgottimu@codeaurora.org>
parent e42865c0

arch/arm/configs/msm8937-perf_defconfig

+1 −0
Original line number Diff line number Diff line
@@ -618,6 +618,7 @@ CONFIG_DEBUG_SET_MODULE_RONX=y 
CONFIG_SECURITY=y

CONFIG_SECURITY_NETWORK=y

CONFIG_LSM_MMAP_MIN_ADDR=4096

CONFIG_HARDENED_USERCOPY=y

CONFIG_SECURITY_SELINUX=y

CONFIG_CRYPTO_NULL=y

CONFIG_CRYPTO_CTR=y

arch/arm/configs/msm8937_defconfig

+1 −0
Original line number Diff line number Diff line
@@ -667,6 +667,7 @@ CONFIG_DEBUG_SET_MODULE_RONX=y 
CONFIG_SECURITY=y

CONFIG_SECURITY_NETWORK=y

CONFIG_LSM_MMAP_MIN_ADDR=4096

CONFIG_HARDENED_USERCOPY=y

CONFIG_SECURITY_SELINUX=y

CONFIG_CRYPTO_NULL=y

CONFIG_CRYPTO_CTR=y

arch/arm/configs/msmcortex-perf_defconfig

+1 −0
Original line number Diff line number Diff line
@@ -607,6 +607,7 @@ CONFIG_DEBUG_SET_MODULE_RONX=y 
CONFIG_SECURITY=y

CONFIG_SECURITY_NETWORK=y

CONFIG_LSM_MMAP_MIN_ADDR=4096

CONFIG_HARDENED_USERCOPY=y

CONFIG_SECURITY_SELINUX=y

CONFIG_CRYPTO_NULL=y

CONFIG_CRYPTO_CTR=y

arch/arm/configs/msmcortex_defconfig

+1 −0
Original line number Diff line number Diff line
@@ -640,6 +640,7 @@ CONFIG_DEBUG_SET_MODULE_RONX=y 
CONFIG_SECURITY=y

CONFIG_SECURITY_NETWORK=y

CONFIG_LSM_MMAP_MIN_ADDR=4096

CONFIG_HARDENED_USERCOPY=y

CONFIG_SECURITY_SELINUX=y

CONFIG_CRYPTO_NULL=y

CONFIG_CRYPTO_CTR=y

arch/arm64/configs/msm-perf_defconfig

+1 −0
Original line number Diff line number Diff line
@@ -619,6 +619,7 @@ CONFIG_DEBUG_ALIGN_RODATA=y 
CONFIG_PFK=y

CONFIG_SECURITY=y

CONFIG_SECURITY_NETWORK=y

CONFIG_HARDENED_USERCOPY=y

CONFIG_SECURITY_SELINUX=y

# CONFIG_INTEGRITY is not set

CONFIG_CRYPTO_NULL=y