Home Home > GIT Browse
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichal Kubecek <mkubecek@suse.cz>2019-09-03 12:47:56 +0200
committerMichal Kubecek <mkubecek@suse.cz>2019-09-03 12:47:56 +0200
commite4ac257fd559ab132dd2163e94cb422370faa117 (patch)
treeabd8654510279f2e2310d3c04b4a35f94e3269e7
parent468fcec7f63cfb509cd5476b534d1ca36c371a81 (diff)
config: enable STACKPROTECTOR_STRONG (jsc#SLE-9120 bsc#1130365)
Enable CONFIG_STACKPROTECTOR_STRONG on all architectures except s390x (where the feature is not available). This extends the number of functions which are protected by "stack canary" check to catch functions writing past their stack frame. This change was requested by SUSE security to make our kernels more resistant to some types of stack overflow attacks. Tests performed by kernel performance teams confirmed that performance impact is acceptable. suse-commit: 4c43fabbd67ea0eed0469a7202c52c40cdb38870
0 files changed, 0 insertions, 0 deletions