Home Home > GIT Browse > vanilla
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJiri Slaby <jslaby@suse.cz>2019-06-18 14:44:46 +0200
committerJiri Slaby <jslaby@suse.cz>2019-06-18 14:49:35 +0200
commit3c72d048a8e815f71dbd90ea453a92cdb0dca0e2 (patch)
tree2d824fc8a4643d1e8b1723c239291bc8c0438743
parent45a8b991e1645dd19263ebd39054014ceeee58fa (diff)
Update config files.
Set HARDENED_USERCOPY=y (bnc#1127808). This can be disabled on the commandline using hardened_usercopy=n.
-rw-r--r--config/arm64/vanilla4
-rw-r--r--config/armv7hl/vanilla4
-rw-r--r--config/i386/vanilla4
-rw-r--r--config/ppc64/vanilla4
-rw-r--r--config/ppc64le/vanilla4
-rw-r--r--config/x86_64/vanilla4
6 files changed, 18 insertions, 6 deletions
diff --git a/config/arm64/vanilla b/config/arm64/vanilla
index e50baa7836..effd0a4f73 100644
--- a/config/arm64/vanilla
+++ b/config/arm64/vanilla
@@ -9881,7 +9881,9 @@ CONFIG_SECURITY_NETWORK_XFRM=y
CONFIG_SECURITY_PATH=y
CONFIG_LSM_MMAP_MIN_ADDR=0
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
-# CONFIG_HARDENED_USERCOPY is not set
+CONFIG_HARDENED_USERCOPY=y
+# CONFIG_HARDENED_USERCOPY_FALLBACK is not set
+# CONFIG_HARDENED_USERCOPY_PAGESPAN is not set
# CONFIG_FORTIFY_SOURCE is not set
# CONFIG_STATIC_USERMODEHELPER is not set
CONFIG_SECURITY_SELINUX=y
diff --git a/config/armv7hl/vanilla b/config/armv7hl/vanilla
index 6778d95da2..58c56f2171 100644
--- a/config/armv7hl/vanilla
+++ b/config/armv7hl/vanilla
@@ -10065,7 +10065,9 @@ CONFIG_SECURITY_NETWORK_XFRM=y
CONFIG_SECURITY_PATH=y
CONFIG_LSM_MMAP_MIN_ADDR=0
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
-# CONFIG_HARDENED_USERCOPY is not set
+CONFIG_HARDENED_USERCOPY=y
+# CONFIG_HARDENED_USERCOPY_FALLBACK is not set
+# CONFIG_HARDENED_USERCOPY_PAGESPAN is not set
# CONFIG_FORTIFY_SOURCE is not set
# CONFIG_STATIC_USERMODEHELPER is not set
CONFIG_SECURITY_SELINUX=y
diff --git a/config/i386/vanilla b/config/i386/vanilla
index 8c9ce6dd58..770a03d1d8 100644
--- a/config/i386/vanilla
+++ b/config/i386/vanilla
@@ -9000,7 +9000,9 @@ CONFIG_SECURITY_PATH=y
CONFIG_INTEL_TXT=y
CONFIG_LSM_MMAP_MIN_ADDR=0
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
-# CONFIG_HARDENED_USERCOPY is not set
+CONFIG_HARDENED_USERCOPY=y
+# CONFIG_HARDENED_USERCOPY_FALLBACK is not set
+# CONFIG_HARDENED_USERCOPY_PAGESPAN is not set
# CONFIG_FORTIFY_SOURCE is not set
# CONFIG_STATIC_USERMODEHELPER is not set
CONFIG_SECURITY_SELINUX=y
diff --git a/config/ppc64/vanilla b/config/ppc64/vanilla
index da2d8b4761..8abcbdd3fe 100644
--- a/config/ppc64/vanilla
+++ b/config/ppc64/vanilla
@@ -7070,7 +7070,9 @@ CONFIG_SECURITY_NETWORK_XFRM=y
CONFIG_SECURITY_PATH=y
CONFIG_LSM_MMAP_MIN_ADDR=0
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
-# CONFIG_HARDENED_USERCOPY is not set
+CONFIG_HARDENED_USERCOPY=y
+# CONFIG_HARDENED_USERCOPY_FALLBACK is not set
+# CONFIG_HARDENED_USERCOPY_PAGESPAN is not set
# CONFIG_FORTIFY_SOURCE is not set
# CONFIG_STATIC_USERMODEHELPER is not set
CONFIG_SECURITY_SELINUX=y
diff --git a/config/ppc64le/vanilla b/config/ppc64le/vanilla
index b4c5be05d1..dc4f39644d 100644
--- a/config/ppc64le/vanilla
+++ b/config/ppc64le/vanilla
@@ -6924,7 +6924,9 @@ CONFIG_SECURITY_NETWORK_XFRM=y
CONFIG_SECURITY_PATH=y
CONFIG_LSM_MMAP_MIN_ADDR=0
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
-# CONFIG_HARDENED_USERCOPY is not set
+CONFIG_HARDENED_USERCOPY=y
+# CONFIG_HARDENED_USERCOPY_FALLBACK is not set
+# CONFIG_HARDENED_USERCOPY_PAGESPAN is not set
# CONFIG_FORTIFY_SOURCE is not set
# CONFIG_STATIC_USERMODEHELPER is not set
CONFIG_SECURITY_SELINUX=y
diff --git a/config/x86_64/vanilla b/config/x86_64/vanilla
index 403af8dd94..b9c40c0d95 100644
--- a/config/x86_64/vanilla
+++ b/config/x86_64/vanilla
@@ -8768,7 +8768,9 @@ CONFIG_SECURITY_PATH=y
CONFIG_INTEL_TXT=y
CONFIG_LSM_MMAP_MIN_ADDR=0
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
-# CONFIG_HARDENED_USERCOPY is not set
+CONFIG_HARDENED_USERCOPY=y
+# CONFIG_HARDENED_USERCOPY_FALLBACK is not set
+# CONFIG_HARDENED_USERCOPY_PAGESPAN is not set
# CONFIG_FORTIFY_SOURCE is not set
# CONFIG_STATIC_USERMODEHELPER is not set
CONFIG_SECURITY_SELINUX=y