[amd64] Enable RANDOMIZE_MEMORY

This commit is contained in:
Ben Hutchings 2016-10-05 22:38:43 +01:00
parent a16ba74627
commit 34bf1f9c3f
2 changed files with 2 additions and 0 deletions

1
debian/changelog vendored
View File

@ -15,6 +15,7 @@ linux (4.8-1~exp1) UNRELEASED; urgency=medium
* [arm*,powerpc*,s390x,sparc64,x86] Enable HARDENED_USERCOPY
* security,perf: Replace GRKERNSEC_PERF_HARDEN patch with the version
submitted upstream
* [amd64] Enable RANDOMIZE_MEMORY
-- Ben Hutchings <ben@decadent.org.uk> Sat, 01 Oct 2016 21:51:33 +0100

View File

@ -17,6 +17,7 @@ CONFIG_EFI_MIXED=y
CONFIG_KEXEC_FILE=y
CONFIG_KEXEC_VERIFY_SIG=y
CONFIG_KEXEC_BZIMAGE_VERIFY_SIG=y
CONFIG_RANDOMIZE_MEMORY=y
## choice: vsyscall table for legacy applications
# CONFIG_LEGACY_VSYSCALL_NATIVE is not set
# CONFIG_LEGACY_VSYSCALL_EMULATE is not set