From: Alexander Popov <alex.popov@linux.com>
Date: Fri, 6 May 2022 15:20:56 +0000 (+0300)
Subject: Add RANDOMIZE_MODULE_REGION_FULL for arm64
X-Git-Tag: v0.6.1~165
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=f305cc9c1e5d9751313c9090cf1d85f80621f1f2;hp=87db8c4fc519a655380aefe635de41e6df1568e3;p=kconfig-hardened-check.git

Add RANDOMIZE_MODULE_REGION_FULL for arm64

Thanks to @izh1979 for the idea.
---

diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py
index d3cbad1..27cbd21 100644
--- a/kconfig_hardened_check/__init__.py
+++ b/kconfig_hardened_check/__init__.py
@@ -378,6 +378,7 @@ def add_kconfig_checks(l, arch):
                  VersionCheck((5, 10)))] # HARDEN_BRANCH_PREDICTOR is enabled by default since v5.10
         l += [KconfigCheck('self_protection', 'defconfig', 'MITIGATE_SPECTRE_BRANCH_HISTORY', 'y')]
         l += [KconfigCheck('self_protection', 'defconfig', 'ARM64_MTE', 'y')]
+        l += [KconfigCheck('self_protection', 'defconfig', 'RANDOMIZE_MODULE_REGION_FULL', 'y')]
     if arch == 'ARM':
         l += [KconfigCheck('self_protection', 'defconfig', 'CPU_SW_DOMAIN_PAN', 'y')]
         l += [KconfigCheck('self_protection', 'defconfig', 'HARDEN_BRANCH_PREDICTOR', 'y')]