From: Hauke Mehrtens Date: Sun, 7 Apr 2019 17:38:04 +0000 (+0200) Subject: x86: Activate CONFIG_X86_SMAP X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=2164a7bf153c364b691858d7f4555191188f7999;p=openwrt%2Fstaging%2Flinusw.git x86: Activate CONFIG_X86_SMAP This activates "Supervisor Mode Access Prevention". modern CPUs will prevent the kernel code from accessing any data from the userspace without the usage of copy_to_user() or copy_from_user() Signed-off-by: Hauke Mehrtens --- diff --git a/target/linux/x86/config-4.14 b/target/linux/x86/config-4.14 index ae96e4d97a..014e7b275b 100644 --- a/target/linux/x86/config-4.14 +++ b/target/linux/x86/config-4.14 @@ -505,7 +505,7 @@ CONFIG_X86_PPRO_FENCE=y # CONFIG_X86_REBOOTFIXUPS is not set CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y CONFIG_X86_RESERVE_LOW=64 -# CONFIG_X86_SMAP is not set +CONFIG_X86_SMAP=y # CONFIG_X86_SPEEDSTEP_CENTRINO is not set # CONFIG_X86_SPEEDSTEP_ICH is not set # CONFIG_X86_SPEEDSTEP_LIB is not set diff --git a/target/linux/x86/config-4.19 b/target/linux/x86/config-4.19 index d395876955..d8c2d966d0 100644 --- a/target/linux/x86/config-4.19 +++ b/target/linux/x86/config-4.19 @@ -484,7 +484,7 @@ CONFIG_X86_PLATFORM_DEVICES=y # CONFIG_X86_REBOOTFIXUPS is not set CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y CONFIG_X86_RESERVE_LOW=64 -# CONFIG_X86_SMAP is not set +CONFIG_X86_SMAP=y # CONFIG_X86_SPEEDSTEP_CENTRINO is not set # CONFIG_X86_SPEEDSTEP_ICH is not set # CONFIG_X86_SPEEDSTEP_SMI is not set