diff options
| author | Hauke Mehrtens <hauke@hauke-m.de> | 2019-04-07 18:06:34 +0200 |
|---|---|---|
| committer | Hauke Mehrtens <hauke@hauke-m.de> | 2019-05-11 17:15:41 +0200 |
| commit | 32eb66881c7f71004d35e904f89651e6a2d64214 (patch) | |
| tree | 657d4f212d33d3c0cf06588e0054a349ded6d59c /target/linux/armvirt | |
| parent | 9b1239451d6598f39b3689c8c6e0d6147965e601 (diff) | |
| download | upstream-32eb66881c7f71004d35e904f89651e6a2d64214.tar.gz upstream-32eb66881c7f71004d35e904f89651e6a2d64214.tar.bz2 upstream-32eb66881c7f71004d35e904f89651e6a2d64214.zip | |
kernel: Activate CONFIG_ARM64_SW_TTBR0_PAN
This activates "Emulate Privileged Access Never using TTBR0_EL1
switching" on ARM64.
This should prevent the kernel from reading code from user space in
kernel context.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Diffstat (limited to 'target/linux/armvirt')
| -rw-r--r-- | target/linux/armvirt/64/config-default | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/target/linux/armvirt/64/config-default b/target/linux/armvirt/64/config-default index e5c05b3160..23d038cbb6 100644 --- a/target/linux/armvirt/64/config-default +++ b/target/linux/armvirt/64/config-default @@ -43,7 +43,6 @@ CONFIG_ARM64_PAN=y # CONFIG_ARM64_PTDUMP_DEBUGFS is not set # CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set CONFIG_ARM64_SSBD=y -# CONFIG_ARM64_SW_TTBR0_PAN is not set CONFIG_ARM64_UAO=y CONFIG_ARM64_VA_BITS=39 CONFIG_ARM64_VA_BITS_39=y |