X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=config_files%2Fkspp-recommendations.config;h=71ebe6e97272cd2c3712701e83b5bbea69051ffe;hb=5c669f2b592a4a3b5244ec9206de99c01a84a9bf;hp=d2283b467964c71bda0f8f05005f9cb5028b630e;hpb=cdbc8f0cd544afecbde3cd348e7b0091e144845d;p=kconfig-hardened-check.git diff --git a/config_files/kspp-recommendations.config b/config_files/kspp-recommendations.config index d2283b4..71ebe6e 100644 --- a/config_files/kspp-recommendations.config +++ b/config_files/kspp-recommendations.config @@ -1,4 +1,5 @@ # CONFIGs +# Linux/x86_64 4.20 Kernel Configuration # Report BUG() conditions and kill the offending process. CONFIG_BUG=y @@ -10,8 +11,8 @@ CONFIG_STRICT_KERNEL_RWX=y CONFIG_DEBUG_WX=y # Use -fstack-protector-strong (gcc 4.9+) for best stack canary coverage. -CONFIG_CC_STACKPROTECTOR=y -CONFIG_CC_STACKPROTECTOR_STRONG=y +CONFIG_STACKPROTECTOR=y +CONFIG_STACKPROTECTOR_STRONG=y # Do not allow direct physical memory access (but if you must have it, at least enable STRICT mode...) # CONFIG_DEVMEM is not set