1 # Basic kernel hardening options (specific to
2
3 # Modern libc no longer needs a fixed-position
4 # it as a possible target.
5 CONFIG_LEGACY_VSYSCALL_NONE=y
6
7 # Enable chip-specific IOMMU support.
8 CONFIG_INTEL_IOMMU=y
9 CONFIG_INTEL_IOMMU_DEFAULT_ON=y
10 CONFIG_INTEL_IOMMU_SVM=y
11 CONFIG_AMD_IOMMU=y
12
13 # Enforce CET Indirect Branch Tracking in the
14 CONFIG_X86_KERNEL_IBT=y
15
16 # Enable CET Shadow Stack for userspace.
17 CONFIG_X86_USER_SHADOW_STACK=y
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.