[ubuntu-hardened] [PATCH 0/4] Various config tweaks
Kees Cook
keescook at chromium.org
Fri Aug 20 07:09:58 UTC 2021
From: Kees Cook <kees at ubuntu.com>
Hi!
It's been a while. :) Hopefully I've got the right format for these.
These are based on impish/master-next. The first three should be easy.
The last one probably needs to be double-checked -- there might be some
hidden things that trip over CONFIG_UBSAN_BOUNDS, but having it in place
should catch the whole class of fixed-buffer-size index overflows.
Thanks!
-Kees
Kees Cook (4):
UBUNTU: [Config] annotations: set CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT to y
UBUNTU: [Config] Disable CONFIG_MANDATORY_FILE_LOCKING
UBUNTU: [Config] Disable CONFIG_HARDENED_USERCOPY_FALLBACK
UBUNTU: [Config] Enable CONFIG_UBSAN_BOUNDS
debian.master/config/annotations | 17 ++++++++++++++---
debian.master/config/config.common.ubuntu | 16 +++++++++++++---
2 files changed, 27 insertions(+), 6 deletions(-)
--
2.30.2
More information about the ubuntu-hardened
mailing list