From 6f4d93794d11d7c31dd53e85feff17eb6a1e792e Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Fri, 22 Apr 2022 12:50:34 +0300 Subject: [PATCH 1/1] Drop the ARM64_MTE check for userspace hardening It is moved to kernel self protection. Thanks to @izh1979 for the idea. --- kconfig_hardened_check/__init__.py | 2 -- 1 file changed, 2 deletions(-) diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py index e3488fd..493d177 100644 --- a/kconfig_hardened_check/__init__.py +++ b/kconfig_hardened_check/__init__.py @@ -629,8 +629,6 @@ def add_kconfig_checks(l, arch): l += [KconfigCheck('harden_userspace', 'defconfig', 'INTEGRITY', 'y')] if arch == 'ARM': l += [KconfigCheck('harden_userspace', 'my', 'INTEGRITY', 'y')] - if arch == 'ARM64': - l += [KconfigCheck('harden_userspace', 'defconfig', 'ARM64_MTE', 'y')] if arch in ('ARM', 'X86_32'): l += [KconfigCheck('harden_userspace', 'defconfig', 'VMSPLIT_3G', 'y')] if arch in ('X86_64', 'ARM64'): -- 2.31.1