From mboxrd@z Thu Jan  1 00:00:00 1970
From: Arne Fitzenreiter <arne_f@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] kernel: enable CONFIG_FORTIFY_SOUCRE on aarch64
Date: Thu, 11 Jun 2020 09:23:18 +0200
Message-ID: <42537a456402dabf442ef8b2450aa9ef@ipfire.org>
In-Reply-To: <dddb469a-9224-afa6-017c-384c0c62b1db@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3553821816882428284=="
List-Id: <development.lists.ipfire.org>

--===============3553821816882428284==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

Some other options disable this at make oldconfig because it depends on
disabled.

Arne


Am 2020-06-09 19:55, schrieb Peter Müller:
> Partially fixes: #12369
> 
> Cc: Arne Fitzenreiter <arne.fitzenreiter(a)ipfire.org>
> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
> ---
>  config/kernel/kernel.config.aarch64-ipfire | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/config/kernel/kernel.config.aarch64-ipfire
> b/config/kernel/kernel.config.aarch64-ipfire
> index e0f2f6df8..1e6c89b6c 100644
> --- a/config/kernel/kernel.config.aarch64-ipfire
> +++ b/config/kernel/kernel.config.aarch64-ipfire
> @@ -6543,7 +6543,7 @@ CONFIG_SECURITY_NETWORK_XFRM=y
>  CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
>  CONFIG_HARDENED_USERCOPY=y
>  CONFIG_HARDENED_USERCOPY_PAGESPAN=y
> -# CONFIG_FORTIFY_SOURCE is not set
> +CONFIG_FORTIFY_SOURCE=y
>  # CONFIG_STATIC_USERMODEHELPER is not set
>  # CONFIG_SECURITY_SMACK is not set
>  # CONFIG_SECURITY_TOMOYO is not set

--===============3553821816882428284==--