[amd64] Enable RANDOMIZE_MEMORY
This commit is contained in:
parent
a16ba74627
commit
34bf1f9c3f
|
@ -15,6 +15,7 @@ linux (4.8-1~exp1) UNRELEASED; urgency=medium
|
||||||
* [arm*,powerpc*,s390x,sparc64,x86] Enable HARDENED_USERCOPY
|
* [arm*,powerpc*,s390x,sparc64,x86] Enable HARDENED_USERCOPY
|
||||||
* security,perf: Replace GRKERNSEC_PERF_HARDEN patch with the version
|
* security,perf: Replace GRKERNSEC_PERF_HARDEN patch with the version
|
||||||
submitted upstream
|
submitted upstream
|
||||||
|
* [amd64] Enable RANDOMIZE_MEMORY
|
||||||
|
|
||||||
-- Ben Hutchings <ben@decadent.org.uk> Sat, 01 Oct 2016 21:51:33 +0100
|
-- Ben Hutchings <ben@decadent.org.uk> Sat, 01 Oct 2016 21:51:33 +0100
|
||||||
|
|
||||||
|
|
|
@ -17,6 +17,7 @@ CONFIG_EFI_MIXED=y
|
||||||
CONFIG_KEXEC_FILE=y
|
CONFIG_KEXEC_FILE=y
|
||||||
CONFIG_KEXEC_VERIFY_SIG=y
|
CONFIG_KEXEC_VERIFY_SIG=y
|
||||||
CONFIG_KEXEC_BZIMAGE_VERIFY_SIG=y
|
CONFIG_KEXEC_BZIMAGE_VERIFY_SIG=y
|
||||||
|
CONFIG_RANDOMIZE_MEMORY=y
|
||||||
## choice: vsyscall table for legacy applications
|
## choice: vsyscall table for legacy applications
|
||||||
# CONFIG_LEGACY_VSYSCALL_NATIVE is not set
|
# CONFIG_LEGACY_VSYSCALL_NATIVE is not set
|
||||||
# CONFIG_LEGACY_VSYSCALL_EMULATE is not set
|
# CONFIG_LEGACY_VSYSCALL_EMULATE is not set
|
||||||
|
|
Loading…
Reference in New Issue