diff mbox series

kernel: enable CONFIG_FORTIFY_SOUCRE on aarch64

Message ID dddb469a-9224-afa6-017c-384c0c62b1db@ipfire.org
State Accepted
Commit 3eb393ff2e44a97d32c91621b093253ebde6d1fa
Headers
Series kernel: enable CONFIG_FORTIFY_SOUCRE on aarch64 |

Commit Message

Peter Müller June 9, 2020, 5:55 p.m. UTC 
  Partially fixes: #12369

Cc: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---
 config/kernel/kernel.config.aarch64-ipfire | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comments

Arne Fitzenreiter June 11, 2020, 7:23 a.m. UTC | #1 
Some other options disable this at make oldconfig because it depends on
disabled.

Arne


Am 2020-06-09 19:55, schrieb Peter Müller:
> Partially fixes: #12369
> 
> Cc: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
> Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
> ---
>  config/kernel/kernel.config.aarch64-ipfire | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/config/kernel/kernel.config.aarch64-ipfire
> b/config/kernel/kernel.config.aarch64-ipfire
> index e0f2f6df8..1e6c89b6c 100644
> --- a/config/kernel/kernel.config.aarch64-ipfire
> +++ b/config/kernel/kernel.config.aarch64-ipfire
> @@ -6543,7 +6543,7 @@ CONFIG_SECURITY_NETWORK_XFRM=y
>  CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
>  CONFIG_HARDENED_USERCOPY=y
>  CONFIG_HARDENED_USERCOPY_PAGESPAN=y
> -# CONFIG_FORTIFY_SOURCE is not set
> +CONFIG_FORTIFY_SOURCE=y
>  # CONFIG_STATIC_USERMODEHELPER is not set
>  # CONFIG_SECURITY_SMACK is not set
>  # CONFIG_SECURITY_TOMOYO is not set
diff mbox series

Patch

diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kernel.config.aarch64-ipfire
index e0f2f6df8..1e6c89b6c 100644
--- a/config/kernel/kernel.config.aarch64-ipfire
+++ b/config/kernel/kernel.config.aarch64-ipfire
@@ -6543,7 +6543,7 @@  CONFIG_SECURITY_NETWORK_XFRM=y
 CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
 CONFIG_HARDENED_USERCOPY=y
 CONFIG_HARDENED_USERCOPY_PAGESPAN=y
-# CONFIG_FORTIFY_SOURCE is not set
+CONFIG_FORTIFY_SOURCE=y
 # CONFIG_STATIC_USERMODEHELPER is not set
 # CONFIG_SECURITY_SMACK is not set
 # CONFIG_SECURITY_TOMOYO is not set