From 1bfbcfbda62098a34206889e52ace909eb6d975b Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Mon, 16 Jan 2023 00:10:12 +0300 Subject: [PATCH 1/1] Update the VMAP_STACK check: it is available for ARM --- kconfig_hardened_check/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py index df94812..ff23746 100644 --- a/kconfig_hardened_check/__init__.py +++ b/kconfig_hardened_check/__init__.py @@ -378,7 +378,7 @@ def add_kconfig_checks(l, arch): VersionCheck((5, 5)))] # REFCOUNT_FULL is enabled by default since v5.5 if arch in ('X86_64', 'ARM64', 'X86_32'): l += [KconfigCheck('self_protection', 'defconfig', 'RANDOMIZE_BASE', 'y')] - if arch in ('X86_64', 'ARM64'): + if arch in ('X86_64', 'ARM64', 'ARM'): l += [KconfigCheck('self_protection', 'defconfig', 'VMAP_STACK', 'y')] if arch in ('X86_64', 'X86_32'): l += [KconfigCheck('self_protection', 'defconfig', 'DEBUG_WX', 'y')] -- 2.31.1