summaryrefslogtreecommitdiffstats
path: root/arch/powerpc/configs/security.config
blob: 0d54e29e2cdfc6ef34aa921855f8ba5202a6a78a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
# Help: Common security options for PowerPC builds

# This is the equivalent of booting with lockdown=integrity
CONFIG_SECURITY=y
CONFIG_SECURITYFS=y
CONFIG_SECURITY_LOCKDOWN_LSM=y
CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y

# These are some general, reasonably inexpensive hardening options
CONFIG_HARDENED_USERCOPY=y
CONFIG_FORTIFY_SOURCE=y
CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y

# UBSAN bounds checking is very cheap and good for hardening
CONFIG_UBSAN=y
# CONFIG_UBSAN_MISC is not set