From: Javier Tia <javier.tia@linaro.org>
Date: Tue, 3 Oct 2023 22:54:38 +0000 (-0600)
Subject: armsr: armv8: Enable KASLR in kernel 6.1
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=2e3ea6d2066fdbb7955df61711c7a0c372c6626b;p=openwrt%2Fstaging%2Fnbd.git

armsr: armv8: Enable KASLR in kernel 6.1

In userspace, ASLR is enabled, but it's missing to enable KASLR on the
kernel side to improve security as part of SystemReady recommendations.

Signed-off-by: Javier Tia <javier.tia@linaro.org>
---

diff --git a/target/linux/armsr/armv8/config-6.1 b/target/linux/armsr/armv8/config-6.1
index 4eab79bba9..0ead973064 100644
--- a/target/linux/armsr/armv8/config-6.1
+++ b/target/linux/armsr/armv8/config-6.1
@@ -599,6 +599,10 @@ CONFIG_QUEUED_RWLOCKS=y
 CONFIG_QUEUED_SPINLOCKS=y
 CONFIG_RASPBERRYPI_FIRMWARE=y
 CONFIG_RASPBERRYPI_POWER=y
+CONFIG_RANDOMIZE_BASE=y
+CONFIG_RANDOMIZE_MODULE_REGION_FULL=y
+CONFIG_RANDSTRUCT_NONE=y
+CONFIG_RELOCATABLE=y
 # CONFIG_RAVB is not set
 CONFIG_RCAR_DMAC=y
 # CONFIG_RCAR_GEN3_THERMAL is not set