leandrof/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
5e84dd547b
linux/arch/powerpc/configs
History
Michael Ellerman 5e84dd547b powerpc/configs/skiroot: Enable some more hardening options 
Enable more hardening options.

Note BUG_ON_DATA_CORRUPTION selects DEBUG_LIST and is essentially just
a synonym for it.

DEBUG_SG, DEBUG_NOTIFIERS, DEBUG_LIST, DEBUG_CREDENTIALS and
SCHED_STACK_END_CHECK should all be low overhead and just add a few
extra checks.

SLAB_FREELIST_RANDOM, and SLUB_DEBUG_ON will add some overhead to the
SLAB allocator, but nothing that should be meaningful for skiroot.

Unselecting SLAB_MERGE_DEFAULT causes the SLAB to use more memory, but
the skiroot kernel shouldn't be memory constrained on any of our
systems, all it does is run a small bootloader.

Disabling merging has some security/robustness benefit as it means a
user-after-free or overflow will be limited to the objects in that
slab, rather than potentially affecting objects from unrelated slabs
that have been merged.

Note also that slab merging is disabled anyway by enabling
SLUB_DEBUG_ON, because of the SLAB_NEVER_MERGE mask.

Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Acked-by: Joel Stanley <joel@jms.id.au>
Link: https://lore.kernel.org/r/20200121043000.16212-9-mpe@ellerman.id.au
2020-01-31 21:20:35 +11:00
..
40x Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace 2019-12-01 13:26:18 -08:00
44x powerpc/configs: Drop NET_VENDOR_HP which moved to staging 2020-01-31 21:19:41 +11:00
52xx powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
83xx powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
85xx powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
85xx-32bit.config powerpc/85xx: Use kconfig fragments 2015-08-07 22:59:19 -05:00
85xx-64bit.config powerpc/85xx: Use kconfig fragments 2015-08-07 22:59:19 -05:00
85xx-hw.config mtd: rawnand: Clarify Kconfig entry MTD_NAND 2019-04-18 08:54:00 +02:00
85xx-smp.config powerpc/85xx: Use kconfig fragments 2015-08-07 22:59:19 -05:00
86xx-hw.config mtd: rawnand: Clarify Kconfig entry MTD_NAND 2019-04-18 08:54:00 +02:00
86xx-smp.config powerpc/86xx: Switch to kconfig fragments approach 2016-03-11 19:19:12 -06:00
adder875_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
altivec.config powerpc/85xx: Use kconfig fragments 2015-08-07 22:59:19 -05:00
amigaone_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
be.config powerpc/configs: Add a powernv_be_defconfig 2017-07-31 16:56:37 +10:00
book3s_32.config powerpc: Add ppc32_allmodconfig defconfig target 2018-07-24 22:03:15 +10:00
cell_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
chrp32_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
corenet_base.config powerpc/configs: Rename foo_basic_defconfig to foo_base.config 2019-10-28 21:54:16 +11:00
debug.config powerpc/configs: Add debug config fragment 2019-10-28 21:54:16 +11:00
dpaa.config powerpc/configs/dpaa: enable the Cortina PHY driver 2018-08-08 17:13:45 -05:00
ep88xc_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
ep8248e_defconfig powerpc/configs: Remove useless UEVENT_HELPER_PATH 2019-07-03 15:19:36 +10:00
fsl-emb-nonhw.config powerpc/configs: Remove useless UEVENT_HELPER_PATH 2019-07-03 15:19:36 +10:00
g5_defconfig powerpc/configs: Disable latencytop 2019-07-04 17:09:03 +10:00
gamecube_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
guest.config powerpc/configs: Add KVM guest defconfig 2018-11-26 22:33:37 +11:00
holly_defconfig powerpc/configs: Remove useless UEVENT_HELPER_PATH 2019-07-03 15:19:36 +10:00
le.config powerpc/configs: Replace pseries_le_defconfig with a Makefile target using merge_config 2015-06-02 16:54:49 +10:00
linkstation_defconfig powerpc/configs: Remove useless UEVENT_HELPER_PATH 2019-07-03 15:19:36 +10:00
maple_defconfig powerpc/configs: Disable latencytop 2019-07-04 17:09:03 +10:00
mgcoge_defconfig powerpc/configs: Remove useless UEVENT_HELPER_PATH 2019-07-03 15:19:36 +10:00
mpc83xx_defconfig powerpc/configs: Remove useless UEVENT_HELPER_PATH 2019-07-03 15:19:36 +10:00
mpc85xx_base.config powerpc/configs: Rename foo_basic_defconfig to foo_base.config 2019-10-28 21:54:16 +11:00
mpc86xx_base.config powerpc/configs: Rename foo_basic_defconfig to foo_base.config 2019-10-28 21:54:16 +11:00
mpc512x_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
mpc866_ads_defconfig powerpc/8xx: Remove CPU6 ERRATA Workaround 2018-01-16 23:47:12 +11:00
mpc885_ads_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
mpc5200_defconfig powerpc/sysdev: drop simple gpio 2019-11-21 15:41:34 +11:00
mpc7448_hpc2_defconfig powerpc/configs: Remove useless UEVENT_HELPER_PATH 2019-07-03 15:19:36 +10:00
mpc8272_ads_defconfig powerpc/configs: Remove useless UEVENT_HELPER_PATH 2019-07-03 15:19:36 +10:00
mvme5100_defconfig powerpc/configs: Remove useless UEVENT_HELPER_PATH 2019-07-03 15:19:36 +10:00
pasemi_defconfig powerpc/configs: Remove useless UEVENT_HELPER_PATH 2019-07-03 15:19:36 +10:00
pmac32_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
powernv_defconfig powerpc/configs: Drop CONFIG_QLGE which moved to staging 2020-01-31 21:19:14 +11:00
ppc6xx_defconfig powerpc/configs: Drop CONFIG_QLGE which moved to staging 2020-01-31 21:19:14 +11:00
ppc40x_defconfig powerpc: remove the ppc44x ocm.c file 2019-08-27 13:03:33 +10:00
ppc44x_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
ppc64_defconfig powerpc/configs: Drop CONFIG_QLGE which moved to staging 2020-01-31 21:19:14 +11:00
ppc64e_defconfig powerpc/configs: Disable latencytop 2019-07-04 17:09:03 +10:00
pq2fads_defconfig powerpc/configs: Remove useless UEVENT_HELPER_PATH 2019-07-03 15:19:36 +10:00
ps3_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
pseries_defconfig powerpc/configs: Drop CONFIG_QLGE which moved to staging 2020-01-31 21:19:14 +11:00
skiroot_defconfig powerpc/configs/skiroot: Enable some more hardening options 2020-01-31 21:20:35 +11:00
storcenter_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
tqm8xx_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00
wii_defconfig powerpc/configs: remove obsolete CONFIG_INET_XFRM_MODE_* and CONFIG_INET6_XFRM_MODE_* 2019-11-13 16:58:06 +11:00