aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorHauke Mehrtens <hauke@hauke-m.de>2023-04-22 18:45:43 +0200
committerChristian Marangi <ansuelsmth@gmail.com>2023-05-03 15:13:26 +0200
commit467aa08f8ae0123adf973bb9e637a7763a53d60d (patch)
tree1c1c0a48248c7678a27ea12fedd0a390623eb07a
parent626f5f77f76ac01a562df5423fe43bb1ecfdbc05 (diff)
downloadupstream-467aa08f8ae0123adf973bb9e637a7763a53d60d.tar.gz
upstream-467aa08f8ae0123adf973bb9e637a7763a53d60d.tar.bz2
upstream-467aa08f8ae0123adf973bb9e637a7763a53d60d.zip
kernel: Activate CONFIG_SLAB_FREELIST_RANDOM
This activates CONFIG_SLAB_FREELIST_RANDOM. This option make the free list less predictable. This makes it harder to exploit heap based security vulnerabilities. This adds a little bit more code to the kernel and a small additional compute overhead. This option is activated in Debian by default. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
-rw-r--r--target/linux/generic/config-5.102
-rw-r--r--target/linux/generic/config-5.152
2 files changed, 2 insertions, 2 deletions
diff --git a/target/linux/generic/config-5.10 b/target/linux/generic/config-5.10
index 9645072a55..49325971f6 100644
--- a/target/linux/generic/config-5.10
+++ b/target/linux/generic/config-5.10
@@ -5464,7 +5464,7 @@ CONFIG_SIGNALFD=y
# CONFIG_SLAB is not set
CONFIG_SLABINFO=y
CONFIG_SLAB_FREELIST_HARDENED=y
-# CONFIG_SLAB_FREELIST_RANDOM is not set
+CONFIG_SLAB_FREELIST_RANDOM=y
CONFIG_SLAB_MERGE_DEFAULT=y
# CONFIG_SLHC is not set
# CONFIG_SLICOSS is not set
diff --git a/target/linux/generic/config-5.15 b/target/linux/generic/config-5.15
index 3d5a860673..c6af24ec66 100644
--- a/target/linux/generic/config-5.15
+++ b/target/linux/generic/config-5.15
@@ -5754,7 +5754,7 @@ CONFIG_SIGNALFD=y
# CONFIG_SLAB is not set
CONFIG_SLABINFO=y
CONFIG_SLAB_FREELIST_HARDENED=y
-# CONFIG_SLAB_FREELIST_RANDOM is not set
+CONFIG_SLAB_FREELIST_RANDOM=y
CONFIG_SLAB_MERGE_DEFAULT=y
# CONFIG_SLHC is not set
# CONFIG_SLICOSS is not set