armsr: armv8: Enable KASLR in kernel 6.1
authorJavier Tia <javier.tia@linaro.org>
Tue, 3 Oct 2023 22:54:38 +0000 (16:54 -0600)
committerHauke Mehrtens <hauke@hauke-m.de>
Thu, 5 Oct 2023 19:57:17 +0000 (21:57 +0200)
In userspace, ASLR is enabled, but it's missing to enable KASLR on the
kernel side to improve security as part of SystemReady recommendations.

Signed-off-by: Javier Tia <javier.tia@linaro.org>
target/linux/armsr/armv8/config-6.1

index 4eab79bba964593e01dfcbdc232af924354f9489..0ead9730641b65a7650527b7de845e434f56ebd6 100644 (file)
@@ -599,6 +599,10 @@ CONFIG_QUEUED_RWLOCKS=y
 CONFIG_QUEUED_SPINLOCKS=y
 CONFIG_RASPBERRYPI_FIRMWARE=y
 CONFIG_RASPBERRYPI_POWER=y
+CONFIG_RANDOMIZE_BASE=y
+CONFIG_RANDOMIZE_MODULE_REGION_FULL=y
+CONFIG_RANDSTRUCT_NONE=y
+CONFIG_RELOCATABLE=y
 # CONFIG_RAVB is not set
 CONFIG_RCAR_DMAC=y
 # CONFIG_RCAR_GEN3_THERMAL is not set