]>
Commit | Line | Data |
---|---|---|
a957de05 | 1 | # |
2 | # PaX | |
2380c486 | 3 | # |
a957de05 | 4 | CONFIG_PAX=y |
a957de05 | 5 | |
6 | # | |
7 | # PaX Control | |
2380c486 | 8 | # |
a957de05 | 9 | CONFIG_PAX_SOFTMODE=y |
10 | # CONFIG_PAX_EI_PAX is not set | |
11 | CONFIG_PAX_PT_PAX_FLAGS=y | |
12 | # CONFIG_PAX_NO_ACL_FLAGS is not set | |
13 | CONFIG_PAX_HAVE_ACL_FLAGS=y | |
14 | # CONFIG_PAX_HOOK_ACL_FLAGS is not set | |
15 | ||
16 | # | |
17 | # Non-executable pages | |
2380c486 | 18 | # |
a957de05 | 19 | CONFIG_PAX_NOEXEC=y |
20 | CONFIG_PAX_PAGEEXEC=y | |
2380c486 JR |
21 | # CONFIG_PAX_SEGMEXEC is not set |
22 | # CONFIG_PAX_EMUTRAMP is not set | |
23 | # CONFIG_PAX_EMUSIGRT is not set | |
a957de05 | 24 | CONFIG_PAX_MPROTECT=y |
2380c486 JR |
25 | CONFIG_PAX_ETEXECRELOCS=y |
26 | # CONFIG_PAX_EMUPLT is not set | |
a957de05 | 27 | # CONFIG_PAX_NOELFRELOCS is not set |
28 | ||
29 | # | |
30 | # Address Space Layout Randomization | |
2380c486 | 31 | # |
a957de05 | 32 | CONFIG_PAX_ASLR=y |
33 | # CONFIG_PAX_RANDKSTACK is not set | |
34 | CONFIG_PAX_RANDUSTACK=y | |
35 | CONFIG_PAX_RANDMMAP=y | |
a957de05 | 36 | |
2380c486 JR |
37 | # |
38 | # Miscellaneous hardening features | |
39 | # | |
40 | # CONFIG_PAX_MEMORY_SANITIZE is not set | |
41 | # CONFIG_PAX_REFCOUNT is not set | |
017d2877 | 42 | CONFIG_PAX_USERCOPY=y |
2380c486 JR |
43 | CONFIG_PAX_MEMORY_UDEREF=y |
44 | ||
45 | CONFIG_PAX_KERNEXEC=y |