diff options
| author | Hauke Mehrtens <hauke@hauke-m.de> | 2023-04-22 19:52:22 +0200 |
|---|---|---|
| committer | Hauke Mehrtens <hauke@hauke-m.de> | 2023-04-29 21:56:53 +0200 |
| commit | ca5555d27e6c62229a3f17d7ac2158d3c24b6af9 (patch) | |
| tree | b3fe0a4f93a6a3e3ffa044ad11f781a5d4435c5b /target/linux/rockchip | |
| parent | 626b37d70aad163089598e33da2590f838f6dd8c (diff) | |
| download | upstream-ca5555d27e6c62229a3f17d7ac2158d3c24b6af9.tar.gz upstream-ca5555d27e6c62229a3f17d7ac2158d3c24b6af9.tar.bz2 upstream-ca5555d27e6c62229a3f17d7ac2158d3c24b6af9.zip | |
kernel: Activate CONFIG_ARM64_SW_TTBR0_PAN
This activates the CONFIG_ARM64_SW_TTBR0_PAN option for all arm64
kernels by default.
The CONFIG_ARM64_SW_TTBR0_PAN option prevents the kernel form accessing
user space memory directly. This makes it harder to exploit the kernel.
This is activated by default and was already activate on all other arm64
targets before.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Diffstat (limited to 'target/linux/rockchip')
| -rw-r--r-- | target/linux/rockchip/armv8/config-5.10 | 1 | ||||
| -rw-r--r-- | target/linux/rockchip/armv8/config-5.15 | 1 |
2 files changed, 0 insertions, 2 deletions
diff --git a/target/linux/rockchip/armv8/config-5.10 b/target/linux/rockchip/armv8/config-5.10 index 220b0ec198..794283fcd9 100644 --- a/target/linux/rockchip/armv8/config-5.10 +++ b/target/linux/rockchip/armv8/config-5.10 @@ -36,7 +36,6 @@ CONFIG_ARM64_PA_BITS_48=y CONFIG_ARM64_PTR_AUTH=y CONFIG_ARM64_RAS_EXTN=y CONFIG_ARM64_SVE=y -# CONFIG_ARM64_SW_TTBR0_PAN is not set CONFIG_ARM64_TAGGED_ADDR_ABI=y CONFIG_ARM64_UAO=y CONFIG_ARM64_VA_BITS=48 diff --git a/target/linux/rockchip/armv8/config-5.15 b/target/linux/rockchip/armv8/config-5.15 index d6377f905f..dc1fbb3d54 100644 --- a/target/linux/rockchip/armv8/config-5.15 +++ b/target/linux/rockchip/armv8/config-5.15 @@ -40,7 +40,6 @@ CONFIG_ARM64_PTR_AUTH=y CONFIG_ARM64_PTR_AUTH_KERNEL=y CONFIG_ARM64_RAS_EXTN=y CONFIG_ARM64_SVE=y -# CONFIG_ARM64_SW_TTBR0_PAN is not set CONFIG_ARM64_TAGGED_ADDR_ABI=y CONFIG_ARM64_VA_BITS=48 # CONFIG_ARM64_VA_BITS_39 is not set |