linux_hardened: enforce usercopy whitelisting

The default is to warn only
This commit is contained in:
Joachim Fasting 2018-04-29 12:00:16 +02:00
parent cbc3afc655
commit 33615ccfa5
No known key found for this signature in database
GPG key ID: 5C204DF675C90294

View file

@ -78,6 +78,9 @@ ${optionalString (versionAtLeast version "4.13") ''
# Perform usercopy bounds checking.
HARDENED_USERCOPY y
${optionalString (versionAtLeast version "4.16") ''
HARDENED_USERCOPY_FALLBACK n
''}
# Randomize allocator freelists.
SLAB_FREELIST_RANDOM y