arch/arm/configs/hardening.config


1
2
3
4
5
6
7

# Basic kernel hardening options (specific to arm)

# Make sure PXN/PAN emulation is enabled.
CONFIG_CPU_SW_DOMAIN_PAN=y

# Dangerous; old interfaces and needless additional attack surface.
# CONFIG_OABI_COMPAT is not set