diff options
| author | Hauke Mehrtens <hauke@hauke-m.de> | 2023-04-22 18:45:43 +0200 |
|---|---|---|
| committer | Christian Marangi <ansuelsmth@gmail.com> | 2023-05-03 15:13:26 +0200 |
| commit | 467aa08f8ae0123adf973bb9e637a7763a53d60d (patch) | |
| tree | 1c1c0a48248c7678a27ea12fedd0a390623eb07a /target/linux | |
| parent | 626f5f77f76ac01a562df5423fe43bb1ecfdbc05 (diff) | |
| download | upstream-467aa08f8ae0123adf973bb9e637a7763a53d60d.tar.gz upstream-467aa08f8ae0123adf973bb9e637a7763a53d60d.tar.bz2 upstream-467aa08f8ae0123adf973bb9e637a7763a53d60d.zip | |
kernel: Activate CONFIG_SLAB_FREELIST_RANDOM
This activates CONFIG_SLAB_FREELIST_RANDOM.
This option make the free list less predictable. This makes it harder to
exploit heap based security vulnerabilities.
This adds a little bit more code to the kernel and a small additional
compute overhead.
This option is activated in Debian by default.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Diffstat (limited to 'target/linux')
| -rw-r--r-- | target/linux/generic/config-5.10 | 2 | ||||
| -rw-r--r-- | target/linux/generic/config-5.15 | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/target/linux/generic/config-5.10 b/target/linux/generic/config-5.10 index 9645072a55..49325971f6 100644 --- a/target/linux/generic/config-5.10 +++ b/target/linux/generic/config-5.10 @@ -5464,7 +5464,7 @@ CONFIG_SIGNALFD=y # CONFIG_SLAB is not set CONFIG_SLABINFO=y CONFIG_SLAB_FREELIST_HARDENED=y -# CONFIG_SLAB_FREELIST_RANDOM is not set +CONFIG_SLAB_FREELIST_RANDOM=y CONFIG_SLAB_MERGE_DEFAULT=y # CONFIG_SLHC is not set # CONFIG_SLICOSS is not set diff --git a/target/linux/generic/config-5.15 b/target/linux/generic/config-5.15 index 3d5a860673..c6af24ec66 100644 --- a/target/linux/generic/config-5.15 +++ b/target/linux/generic/config-5.15 @@ -5754,7 +5754,7 @@ CONFIG_SIGNALFD=y # CONFIG_SLAB is not set CONFIG_SLABINFO=y CONFIG_SLAB_FREELIST_HARDENED=y -# CONFIG_SLAB_FREELIST_RANDOM is not set +CONFIG_SLAB_FREELIST_RANDOM=y CONFIG_SLAB_MERGE_DEFAULT=y # CONFIG_SLHC is not set # CONFIG_SLICOSS is not set |