[PATCH 1/4] UBUNTU: [Config] annotations: set CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT to y

Kees Cook keescook at chromium.org
Fri Aug 20 07:09:59 UTC 2021


From: Kees Cook <kees at ubuntu.com>

While the config was updated, annotations weren't. Set this enabled for
the architectures that support it.

Fixes: 2ea2b647bcdd ("UBUNTU: [Config] Enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT")
Signed-off-by: Kees Cook <kees at ubuntu.com>
---
 debian.master/config/annotations | 1 +
 1 file changed, 1 insertion(+)

diff --git a/debian.master/config/annotations b/debian.master/config/annotations
index 445d8711606a..7599bf532a0b 100644
--- a/debian.master/config/annotations
+++ b/debian.master/config/annotations
@@ -10951,6 +10951,7 @@ CONFIG_ARCH_MMAP_RND_BITS                       policy<{'amd64': '28', 'arm64':
 CONFIG_ARCH_MMAP_RND_COMPAT_BITS                policy<{'amd64': '8', 'arm64': '11', 'ppc64el': '8'}>
 CONFIG_COMPAT_32BIT_TIME                        policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 's390x': 'y'}>
 CONFIG_VMAP_STACK                               policy<{'amd64': 'y', 'arm64': 'y', 's390x': 'y'}>
+CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT          policy<{'amd64': 'y', 'arm64': 'y', 's390x': 'y'}>
 CONFIG_STRICT_KERNEL_RWX                        policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 's390x': 'y'}>
 CONFIG_STRICT_MODULE_RWX                        policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 's390x': 'y'}>
 CONFIG_LOCK_EVENT_COUNTS                        policy<{'amd64': 'n', 'arm64': 'n', 'armhf': 'n', 'ppc64el': 'n', 's390x': 'n'}>
-- 
2.30.2




More information about the kernel-team mailing list