]>
Commit | Line | Data |
---|---|---|
7f651772 | 1 | # |
2 | # PaX | |
3 | # | |
4 | CONFIG_PAX=y | |
5 | ||
6 | # | |
7 | # PaX Control | |
8 | # | |
9 | CONFIG_PAX_SOFTMODE=y | |
10 | # CONFIG_PAX_EI_PAX is not set | |
11 | CONFIG_PAX_PT_PAX_FLAGS=y | |
12 | # CONFIG_PAX_NO_ACL_FLAGS is not set | |
13 | CONFIG_PAX_HAVE_ACL_FLAGS=y | |
14 | # CONFIG_PAX_HOOK_ACL_FLAGS is not set | |
15 | ||
16 | # | |
17 | # Non-executable pages | |
18 | # | |
19 | CONFIG_PAX_NOEXEC=y | |
20 | CONFIG_PAX_PAGEEXEC=y | |
21 | # CONFIG_PAX_SEGMEXEC is not set | |
22 | # CONFIG_PAX_EMUTRAMP is not set | |
23 | # CONFIG_PAX_EMUSIGRT is not set | |
24 | CONFIG_PAX_MPROTECT=y | |
25 | # CONFIG_PAX_EMUPLT is not set | |
26 | CONFIG_PAX_NOELFRELOCS=y | |
27 | ||
28 | # | |
29 | # Address Space Layout Randomization | |
30 | # | |
31 | CONFIG_PAX_ASLR=y | |
32 | # CONFIG_PAX_RANDKSTACK is not set | |
33 | CONFIG_PAX_RANDUSTACK=y | |
34 | CONFIG_PAX_RANDMMAP=y | |
35 | # CONFIG_PAX_NOVSYSCALL is not set | |
36 | ||
37 | # | |
38 | # Miscellaneous hardening features | |
39 | # | |
40 | # CONFIG_PAX_MEMORY_SANITIZE is not set | |
41 | # CONFIG_PAX_MEMORY_UDEREF is not set | |
42 | ||
43 | CONFIG_PAX_KERNEXEC=y | |
44 |