1 # Help: Common security options for PowerPC builds 2 3 # This is the equivalent of booting with lockdown=integrity 4 CONFIG_SECURITY=y 5 CONFIG_SECURITYFS=y 6 CONFIG_SECURITY_LOCKDOWN_LSM=y 7 CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y 8 CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y 9 10 # These are some general, reasonably inexpensive hardening options 11 CONFIG_HARDENED_USERCOPY=y 12 CONFIG_FORTIFY_SOURCE=y 13 CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y 14 15 # UBSAN bounds checking is very cheap and good for hardening 16 CONFIG_UBSAN=y 17 # CONFIG_UBSAN_MISC is not set
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.