From 2164a7bf153c364b691858d7f4555191188f7999 Mon Sep 17 00:00:00 2001 From: Hauke Mehrtens Date: Sun, 7 Apr 2019 19:38:04 +0200 Subject: x86: Activate CONFIG_X86_SMAP This activates "Supervisor Mode Access Prevention". modern CPUs will prevent the kernel code from accessing any data from the userspace without the usage of copy_to_user() or copy_from_user() Signed-off-by: Hauke Mehrtens --- target/linux/x86/config-4.14 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'target/linux/x86/config-4.14') diff --git a/target/linux/x86/config-4.14 b/target/linux/x86/config-4.14 index ae96e4d97a..014e7b275b 100644 --- a/target/linux/x86/config-4.14 +++ b/target/linux/x86/config-4.14 @@ -505,7 +505,7 @@ CONFIG_X86_PPRO_FENCE=y # CONFIG_X86_REBOOTFIXUPS is not set CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y CONFIG_X86_RESERVE_LOW=64 -# CONFIG_X86_SMAP is not set +CONFIG_X86_SMAP=y # CONFIG_X86_SPEEDSTEP_CENTRINO is not set # CONFIG_X86_SPEEDSTEP_ICH is not set # CONFIG_X86_SPEEDSTEP_LIB is not set -- cgit v1.2.3