diff options
| author | Hauke Mehrtens <hauke@hauke-m.de> | 2019-04-07 19:38:04 +0200 |
|---|---|---|
| committer | Hauke Mehrtens <hauke@hauke-m.de> | 2019-05-11 17:15:41 +0200 |
| commit | 2164a7bf153c364b691858d7f4555191188f7999 (patch) | |
| tree | bafb7924c663a07a594dc8ed382495bb02ac34a8 | |
| parent | 75eb8a146de8db0240e2eb3434074c700da2ba3c (diff) | |
| download | upstream-2164a7bf153c364b691858d7f4555191188f7999.tar.gz upstream-2164a7bf153c364b691858d7f4555191188f7999.tar.bz2 upstream-2164a7bf153c364b691858d7f4555191188f7999.zip | |
x86: Activate CONFIG_X86_SMAP
This activates "Supervisor Mode Access Prevention". modern CPUs will
prevent the kernel code from accessing any data from the userspace
without the usage of copy_to_user() or copy_from_user()
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
| -rw-r--r-- | target/linux/x86/config-4.14 | 2 | ||||
| -rw-r--r-- | target/linux/x86/config-4.19 | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/target/linux/x86/config-4.14 b/target/linux/x86/config-4.14 index ae96e4d97a..014e7b275b 100644 --- a/target/linux/x86/config-4.14 +++ b/target/linux/x86/config-4.14 @@ -505,7 +505,7 @@ CONFIG_X86_PPRO_FENCE=y # CONFIG_X86_REBOOTFIXUPS is not set CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y CONFIG_X86_RESERVE_LOW=64 -# CONFIG_X86_SMAP is not set +CONFIG_X86_SMAP=y # CONFIG_X86_SPEEDSTEP_CENTRINO is not set # CONFIG_X86_SPEEDSTEP_ICH is not set # CONFIG_X86_SPEEDSTEP_LIB is not set diff --git a/target/linux/x86/config-4.19 b/target/linux/x86/config-4.19 index d395876955..d8c2d966d0 100644 --- a/target/linux/x86/config-4.19 +++ b/target/linux/x86/config-4.19 @@ -484,7 +484,7 @@ CONFIG_X86_PLATFORM_DEVICES=y # CONFIG_X86_REBOOTFIXUPS is not set CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y CONFIG_X86_RESERVE_LOW=64 -# CONFIG_X86_SMAP is not set +CONFIG_X86_SMAP=y # CONFIG_X86_SPEEDSTEP_CENTRINO is not set # CONFIG_X86_SPEEDSTEP_ICH is not set # CONFIG_X86_SPEEDSTEP_SMI is not set |