[PATCH 1/4] UBUNTU: [Config] annotations: set CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT to y
Kees Cook
keescook at chromium.org
Fri Aug 20 07:09:59 UTC 2021
From: Kees Cook <kees at ubuntu.com>
While the config was updated, annotations weren't. Set this enabled for
the architectures that support it.
Fixes: 2ea2b647bcdd ("UBUNTU: [Config] Enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT")
Signed-off-by: Kees Cook <kees at ubuntu.com>
---
debian.master/config/annotations | 1 +
1 file changed, 1 insertion(+)
diff --git a/debian.master/config/annotations b/debian.master/config/annotations
index 445d8711606a..7599bf532a0b 100644
--- a/debian.master/config/annotations
+++ b/debian.master/config/annotations
@@ -10951,6 +10951,7 @@ CONFIG_ARCH_MMAP_RND_BITS policy<{'amd64': '28', 'arm64':
CONFIG_ARCH_MMAP_RND_COMPAT_BITS policy<{'amd64': '8', 'arm64': '11', 'ppc64el': '8'}>
CONFIG_COMPAT_32BIT_TIME policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 's390x': 'y'}>
CONFIG_VMAP_STACK policy<{'amd64': 'y', 'arm64': 'y', 's390x': 'y'}>
+CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT policy<{'amd64': 'y', 'arm64': 'y', 's390x': 'y'}>
CONFIG_STRICT_KERNEL_RWX policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 's390x': 'y'}>
CONFIG_STRICT_MODULE_RWX policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 's390x': 'y'}>
CONFIG_LOCK_EVENT_COUNTS policy<{'amd64': 'n', 'arm64': 'n', 'armhf': 'n', 'ppc64el': 'n', 's390x': 'n'}>
--
2.30.2
More information about the kernel-team
mailing list