Merge pull request #193179 from amarshall/kernel-hardened-usercopy

linux: Enable HARDENED_USERCOPY
2022-09-27 18:21:23 +02:00
parent a3d9dd7956 7c49efdd2a
commit 80313e055c
1 changed files with 1 additions and 0 deletions
@@ -481,6 +481,7 @@ let
      DEBUG_LIST                       = yes;
      # Detect writes to read-only module pages
      DEBUG_SET_MODULE_RONX            = whenOlder "4.11" (option yes);
+      HARDENED_USERCOPY                = yes;
      RANDOMIZE_BASE                   = option yes;
      STRICT_DEVMEM                    = mkDefault yes; # Filter access to /dev/mem
      IO_STRICT_DEVMEM                 = mkDefault yes;