projects
/
kconfig-hardened-check.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Update the KSPP recommendations
[kconfig-hardened-check.git]
/
kconfig_hardened_check
/
config_files
/
kspp-recommendations
/
kspp-recommendations-arm.config
diff --git
a/kconfig_hardened_check/config_files/kspp-recommendations/kspp-recommendations-arm.config
b/kconfig_hardened_check/config_files/kspp-recommendations/kspp-recommendations-arm.config
index 4271f7db57768d9335204531c8e26ce2a2c53612..3bba331d2d43146a766561d3e9ed1a2a083baa8e 100644
(file)
--- a/
kconfig_hardened_check/config_files/kspp-recommendations/kspp-recommendations-arm.config
+++ b/
kconfig_hardened_check/config_files/kspp-recommendations/kspp-recommendations-arm.config
@@
-1,5
+1,5
@@
# CONFIGs
# CONFIGs
-# Linux/arm 5.4.0 Kernel Configuration
+# Linux/arm 5.
1
4.0 Kernel Configuration
# Report BUG() conditions and kill the offending process.
CONFIG_BUG=y
# Report BUG() conditions and kill the offending process.
CONFIG_BUG=y
@@
-152,7
+152,6
@@
CONFIG_GCC_PLUGIN_STACKLEAK=y
# use with caution or also use CONFIG_GCC_PLUGIN_RANDSTRUCT_PERFORMANCE=y
CONFIG_GCC_PLUGIN_RANDSTRUCT=y
# use with caution or also use CONFIG_GCC_PLUGIN_RANDSTRUCT_PERFORMANCE=y
CONFIG_GCC_PLUGIN_RANDSTRUCT=y
-
# arm
CONFIG_ARM=y
# arm
CONFIG_ARM=y
@@
-168,3
+167,5
@@
CONFIG_CPU_SW_DOMAIN_PAN=y
# Dangerous; old interfaces and needless additional attack surface.
# CONFIG_OABI_COMPAT is not set
# Dangerous; old interfaces and needless additional attack surface.
# CONFIG_OABI_COMPAT is not set
+
+