grsecurity: enable PAX_INITIFY

Uses gcc plugin to detect more instances where memory used during init
can be freed.
This commit is contained in:
Joachim Fasting 2016-12-09 12:08:21 +01:00
parent b412f7d4c3
commit ca7cc96ee8
No known key found for this signature in database
GPG key ID: 7544761007FE4E08

View file

@ -22,6 +22,10 @@ PAX_PT_PAX_FLAGS y
PAX_XATTR_PAX_FLAGS y
PAX_EI_PAX n
PAX_INITIFY y
# initify is a fairly recent feature, enable verbose mode to aid in debugging
PAX_INITIFY_VERBOSE y
# The bts instrumentation method is compatible with binary only modules.
#
# Note: if platform supports SMEP, we could do without this