Add RODATA_FULL_DEFAULT_ENABLED for ARM64

diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py
index 5a384d0cdfa7b80a853dbb716c9fad6f087eb9d7..cb176bca672581f1cf95636b3412038a8fe593c0 100755 (executable)
--- a/kconfig-hardened-check.py
+++ b/kconfig-hardened-check.py
@@ -192,6 +192,7 @@ def construct_checklist(checklist, arch):
     if debug_mode or arch == 'ARM64':
         checklist.append(OptCheck('UNMAP_KERNEL_AT_EL0',         'y', 'defconfig', 'self_protection'))
         checklist.append(OptCheck('HARDEN_EL2_VECTORS',          'y', 'defconfig', 'self_protection'))
+        checklist.append(OptCheck('RODATA_FULL_DEFAULT_ENABLED', 'y', 'defconfig', 'self_protection'))
     if debug_mode or arch == 'X86_64' or arch == 'ARM64':
         checklist.append(OptCheck('VMAP_STACK',                  'y', 'defconfig', 'self_protection'))
     if debug_mode or arch == 'X86_64' or arch == 'ARM64' or arch == 'X86_32':