linux/kernel/configs
Kees Cook a284e43852 hardening: Enable KCFI and some other options
Add some stuff that got missed along the way:

- CONFIG_UNWIND_PATCH_PAC_INTO_SCS=y so SCS vs PAC is hardware
  selectable.

- CONFIG_X86_KERNEL_IBT=y while a default, just be sure.

- CONFIG_CFI_CLANG=y globally.

- CONFIG_PAGE_TABLE_CHECK=y for userspace mapping sanity.

Reviewed-by: Nathan Chancellor <nathan@kernel.org>
Link: https://lore.kernel.org/r/20240501193709.make.982-kees@kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
2024-05-01 12:38:14 -07:00
..
debug.config configs/debug: add NET debug config 2024-02-15 17:46:53 -08:00
hardening.config hardening: Enable KCFI and some other options 2024-05-01 12:38:14 -07:00
kvm_guest.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00
nopm.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00
rust.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00
tiny-base.config treewide: drop CONFIG_EMBEDDED 2023-08-21 13:46:25 -07:00
tiny.config mm/slab: rename CONFIG_SLAB to CONFIG_SLAB_DEPRECATED 2023-05-26 19:01:47 +02:00
x86_debug.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00
xen.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00