From: Alexander Popov <alex.popov@linux.com>
Date: Wed, 4 Mar 2020 12:38:13 +0000 (+0300)
Subject: STACKPROTECTOR_PER_TASK is now default for ARM
X-Git-Tag: v0.5.5~41
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=6fa9f8b627ff568561d03ff75022bfad516642d7;p=kconfig-hardened-check.git

STACKPROTECTOR_PER_TASK is now default for ARM
---

diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py
index 95a5edf..56c52ec 100755
--- a/kconfig-hardened-check.py
+++ b/kconfig-hardened-check.py
@@ -215,6 +215,7 @@ def construct_checklist(checklist, arch):
     if debug_mode or arch == 'ARM':
         checklist.append(OptCheck('VMSPLIT_3G',                  'y', 'defconfig', 'self_protection'))
         checklist.append(OptCheck('CPU_SW_DOMAIN_PAN',           'y', 'defconfig', 'self_protection'))
+        checklist.append(OptCheck('STACKPROTECTOR_PER_TASK',     'y', 'defconfig', 'self_protection'))
     if debug_mode or arch == 'ARM64' or arch == 'ARM':
         checklist.append(OptCheck('REFCOUNT_FULL',               'y', 'defconfig', 'self_protection'))
         checklist.append(OptCheck('HARDEN_BRANCH_PREDICTOR',     'y', 'defconfig', 'self_protection'))
@@ -289,8 +290,6 @@ def construct_checklist(checklist, arch):
                              iommu_support_is_set))
     if debug_mode or arch == 'X86_32':
         checklist.append(OptCheck('PAGE_TABLE_ISOLATION',               'y', 'my', 'self_protection'))
-    if debug_mode or arch == 'ARM':
-        checklist.append(OptCheck('STACKPROTECTOR_PER_TASK',            'y', 'my', 'self_protection'))
 
     if debug_mode or arch == 'X86_64' or arch == 'ARM64' or arch == 'X86_32':
         checklist.append(OptCheck('SECURITY',                               'y', 'defconfig', 'security_policy')) # and choose your favourite LSM