diff options
Diffstat (limited to 'arch/arm/configs/hardening.config')
| -rw-r--r-- | arch/arm/configs/hardening.config | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/arch/arm/configs/hardening.config b/arch/arm/configs/hardening.config new file mode 100644 index 0000000000..327349ce63 --- /dev/null +++ b/arch/arm/configs/hardening.config @@ -0,0 +1,7 @@ +# Basic kernel hardening options (specific to arm) + +# Make sure PXN/PAN emulation is enabled. +CONFIG_CPU_SW_DOMAIN_PAN=y + +# Dangerous; old interfaces and needless additional attack surface. +# CONFIG_OABI_COMPAT is not set |