From e5e4b2a5111cf6fd82566ee3c89974a13cce74bb Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Fri, 10 Jul 2020 23:35:35 +0300 Subject: [PATCH 1/1] Add ARM64_PAN --- kconfig_hardened_check/__init__.py | 1 + 1 file changed, 1 insertion(+) diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py index 3b47044..8bf7937 100644 --- a/kconfig_hardened_check/__init__.py +++ b/kconfig_hardened_check/__init__.py @@ -303,6 +303,7 @@ def construct_checklist(l, arch): l += [AND(OptCheck('self_protection', 'defconfig', 'AMD_IOMMU', 'y'), iommu_support_is_set)] if arch == 'ARM64': + l += [OptCheck('self_protection', 'defconfig', 'ARM64_PAN', 'y')] l += [OptCheck('self_protection', 'defconfig', 'UNMAP_KERNEL_AT_EL0', 'y')] l += [OptCheck('self_protection', 'defconfig', 'HARDEN_EL2_VECTORS', 'y')] l += [OptCheck('self_protection', 'defconfig', 'RODATA_FULL_DEFAULT_ENABLED', 'y')] -- 2.31.1