summaryrefslogtreecommitdiffstats
path: root/arch/arm/configs/hardening.config
diff options
context:
space:
mode:
Diffstat (limited to 'arch/arm/configs/hardening.config')
-rw-r--r--arch/arm/configs/hardening.config7
1 files changed, 7 insertions, 0 deletions
diff --git a/arch/arm/configs/hardening.config b/arch/arm/configs/hardening.config
new file mode 100644
index 0000000000..327349ce63
--- /dev/null
+++ b/arch/arm/configs/hardening.config
@@ -0,0 +1,7 @@
+# Basic kernel hardening options (specific to arm)
+
+# Make sure PXN/PAN emulation is enabled.
+CONFIG_CPU_SW_DOMAIN_PAN=y
+
+# Dangerous; old interfaces and needless additional attack surface.
+# CONFIG_OABI_COMPAT is not set