From patchwork Wed Dec 7 12:19:08 2016 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Amit Pundir X-Patchwork-Id: 87077 Delivered-To: patch@linaro.org Received: by 10.140.20.101 with SMTP id 92csp284002qgi; Wed, 7 Dec 2016 04:19:30 -0800 (PST) X-Received: by 10.84.167.168 with SMTP id d37mr145454374plb.71.1481113170730; Wed, 07 Dec 2016 04:19:30 -0800 (PST) Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id e132si23913777pfg.66.2016.12.07.04.19.30; Wed, 07 Dec 2016 04:19:30 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@linaro.org; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE dis=NONE) header.from=linaro.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752767AbcLGMT0 (ORCPT + 25 others); Wed, 7 Dec 2016 07:19:26 -0500 Received: from mail-pg0-f42.google.com ([74.125.83.42]:34031 "EHLO mail-pg0-f42.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751905AbcLGMTX (ORCPT ); Wed, 7 Dec 2016 07:19:23 -0500 Received: by mail-pg0-f42.google.com with SMTP id x23so161633698pgx.1 for ; Wed, 07 Dec 2016 04:19:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=from:to:cc:subject:date:message-id:in-reply-to:references:author; bh=1SQ0i8eo1K5eU4wqPyeVZpQzNHE/643pxmD8nqDKV18=; b=Hw/jg08iW6d+275pODNXdxkT6n9/d69DDvlBNKdfnLAoIZVibSVwTV293DFx1cIE9P p/kqXs3txfi/forY9exsQMefnka9vRWZwg7jEbJCny0RQGt3Pm+GpkAT4y8Oc7TZo2/i ELbfHKrIegTlmUbxEJHA/1K29QBxrZr5alkFQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:author; bh=1SQ0i8eo1K5eU4wqPyeVZpQzNHE/643pxmD8nqDKV18=; b=XUetXTesEjmSwOx0eMxUVBVFZIbWN8IT05Nuwa6Xw+YqcdOLN2ErBJvEV4qjyQsgRm vzL8mTp3AAlxVHF1eoMvQTRaSlog0P4uXQiR30rQLP6qbZ3EGwUKsj39pTTirvCY6t/u YK21Ir3si8tF0/RhLMgu8/1S7L2Yyklw3/Zl2062oiLf3VgjojDyliInYu1zlsQOShsT NLq3L9CldeX9Mb7pPTwyXb/wZZFAoto7ZgoxoKhO/aLpnRd0hwSM9qRn5KhJrNGXz1ti spSthTXdYDdMoGYCTdgs6T5GZqCt97t4YrwrHUzUiscV2mMEklZ3P9w6PODS2uij+XDi SCFA== X-Gm-Message-State: AKaTC02/NItpIqB7hGPS/ZbuenM6CZYeTcGS6BXcGF6a3C+Lul0iW9hOYpJImmpr+UctcQot X-Received: by 10.84.215.142 with SMTP id l14mr144321287pli.99.1481113156315; Wed, 07 Dec 2016 04:19:16 -0800 (PST) Received: from localhost.localdomain ([106.51.132.212]) by smtp.gmail.com with ESMTPSA id t25sm42567087pgo.9.2016.12.07.04.19.13 (version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 07 Dec 2016 04:19:15 -0800 (PST) From: Amit Pundir To: Andrew Morton Cc: Rob Herring , John Stultz , Android Kernel Team , lkml Subject: [PATCH 2/2] config: android-base: enable hardened usercopy and kernel ASLR Date: Wed, 7 Dec 2016 17:49:08 +0530 Message-Id: <1481113148-29204-2-git-send-email-amit.pundir@linaro.org> X-Mailer: git-send-email 2.7.4 In-Reply-To: <1481113148-29204-1-git-send-email-amit.pundir@linaro.org> References: <1481113148-29204-1-git-send-email-amit.pundir@linaro.org> Author: Amit Pundir Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Enable CONFIG_HARDENED_USERCOPY and CONFIG_RANDOMIZE_BASE in Android base config fragment. Reviewed-at: https://android-review.googlesource.com/#/c/283659/ Reviewed-at: https://android-review.googlesource.com/#/c/278133/ Signed-off-by: Amit Pundir --- kernel/configs/android-base.config | 2 ++ 1 file changed, 2 insertions(+) -- 2.7.4 Acked-by: Rob Herring diff --git a/kernel/configs/android-base.config b/kernel/configs/android-base.config index 1a8f34f..26a06e0 100644 --- a/kernel/configs/android-base.config +++ b/kernel/configs/android-base.config @@ -21,6 +21,7 @@ CONFIG_CP15_BARRIER_EMULATION=y CONFIG_DEFAULT_SECURITY_SELINUX=y CONFIG_EMBEDDED=y CONFIG_FB=y +CONFIG_HARDENED_USERCOPY=y CONFIG_HIGH_RES_TIMERS=y CONFIG_INET6_AH=y CONFIG_INET6_ESP=y @@ -129,6 +130,7 @@ CONFIG_PPP_DEFLATE=y CONFIG_PPP_MPPE=y CONFIG_PREEMPT=y CONFIG_QUOTA=y +CONFIG_RANDOMIZE_BASE=y CONFIG_RTC_CLASS=y CONFIG_RT_GROUP_SCHED=y CONFIG_SECCOMP=y