evie/android_kernel_oneplus_msm8998
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

defconfig: msm: Enable hardened user copy

Browse source 
Hardened user copy provides an extra layer of security checks when
copy_to_user/copy_from_user APIs are used to ensure data accesses are
valid. When invalid accesses are detected the kernel will forcibly
crash.

Change-Id: Ie13ef8a6ee1a3431d43c57a4b7d6e14985e5c33a
Signed-off-by: Ramakrishna Gottimukkula <rgottimu@codeaurora.org>
This commit is contained in:
Ramakrishna Gottimukkula 2017-08-03 13:34:22 +05:30
parent 560d31410c
commit 2e7b372155
4 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
arch/arm/configs/sdm660-perf_defconfig
View file

@ -656,6 +656,7 @@ CONFIG_CORESIGHT_QPDI=y
CONFIG_CORESIGHT_SOURCE_DUMMY=y CONFIG_CORESIGHT_SOURCE_DUMMY=y
CONFIG_PFK=y CONFIG_PFK=y
CONFIG_SECURITY=y CONFIG_SECURITY=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX=y
CONFIG_SECURITY_SMACK=y CONFIG_SECURITY_SMACK=y
CONFIG_CRYPTO_ECHAINIV=y CONFIG_CRYPTO_ECHAINIV=y

1
arch/arm/configs/sdm660_defconfig
View file

@ -694,6 +694,7 @@ CONFIG_CORESIGHT_QPDI=y
CONFIG_CORESIGHT_SOURCE_DUMMY=y CONFIG_CORESIGHT_SOURCE_DUMMY=y
CONFIG_PFK=y CONFIG_PFK=y
CONFIG_SECURITY=y CONFIG_SECURITY=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX=y
CONFIG_SECURITY_SMACK=y CONFIG_SECURITY_SMACK=y
CONFIG_CRYPTO_ECHAINIV=y CONFIG_CRYPTO_ECHAINIV=y

1
arch/arm64/configs/sdm660-perf_defconfig
View file

@ -640,6 +640,7 @@ CONFIG_CORESIGHT_QPDI=y
CONFIG_CORESIGHT_SOURCE_DUMMY=y CONFIG_CORESIGHT_SOURCE_DUMMY=y
CONFIG_PFK=y CONFIG_PFK=y
CONFIG_SECURITY=y CONFIG_SECURITY=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX=y
CONFIG_SECURITY_SMACK=y CONFIG_SECURITY_SMACK=y
CONFIG_CRYPTO_ECHAINIV=y CONFIG_CRYPTO_ECHAINIV=y

1
arch/arm64/configs/sdm660_defconfig
View file

@ -713,6 +713,7 @@ CONFIG_CORESIGHT_QPDI=y
CONFIG_CORESIGHT_SOURCE_DUMMY=y CONFIG_CORESIGHT_SOURCE_DUMMY=y
CONFIG_PFK=y CONFIG_PFK=y
CONFIG_SECURITY=y CONFIG_SECURITY=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX=y
CONFIG_SECURITY_SMACK=y CONFIG_SECURITY_SMACK=y
CONFIG_CRYPTO_ECHAINIV=y CONFIG_CRYPTO_ECHAINIV=y