fb0b153898
Enable CPU domain PAN to ensure that normal kernel accesses are unable to access userspace addresses. Reviewed-at: https://android-review.googlesource.com/#/c/334035/ Signed-off-by: Sami Tolvanen <samitolvanen@google.com> [AmitP: cherry-picked this change from Android common kernel, updated the commit message and re-placed the CONFIG_STRICT_KERNEL_RWX config in sorted order] Signed-off-by: Amit Pundir <amit.pundir@linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
130 lines
2.8 KiB
Plaintext
130 lines
2.8 KiB
Plaintext
# KEEP ALPHABETICALLY SORTED
|
|
# CONFIG_AIO is not set
|
|
# CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS is not set
|
|
# CONFIG_INPUT_MOUSE is not set
|
|
# CONFIG_LEGACY_PTYS is not set
|
|
# CONFIG_NF_CONNTRACK_SIP is not set
|
|
# CONFIG_PM_WAKELOCKS_GC is not set
|
|
# CONFIG_VT is not set
|
|
CONFIG_ARM64_SW_TTBR0_PAN=y
|
|
CONFIG_BACKLIGHT_LCD_SUPPORT=y
|
|
CONFIG_BLK_DEV_DM=y
|
|
CONFIG_BLK_DEV_LOOP=y
|
|
CONFIG_BLK_DEV_RAM=y
|
|
CONFIG_BLK_DEV_RAM_SIZE=8192
|
|
CONFIG_CC_STACKPROTECTOR_STRONG=y
|
|
CONFIG_COMPACTION=y
|
|
CONFIG_CPU_SW_DOMAIN_PAN=y
|
|
CONFIG_DM_CRYPT=y
|
|
CONFIG_DM_UEVENT=y
|
|
CONFIG_DM_VERITY=y
|
|
CONFIG_DM_VERITY_FEC=y
|
|
CONFIG_DRAGONRISE_FF=y
|
|
CONFIG_ENABLE_DEFAULT_TRACERS=y
|
|
CONFIG_EXT4_FS=y
|
|
CONFIG_EXT4_FS_SECURITY=y
|
|
CONFIG_FUSE_FS=y
|
|
CONFIG_GREENASIA_FF=y
|
|
CONFIG_HIDRAW=y
|
|
CONFIG_HID_A4TECH=y
|
|
CONFIG_HID_ACRUX=y
|
|
CONFIG_HID_ACRUX_FF=y
|
|
CONFIG_HID_APPLE=y
|
|
CONFIG_HID_BELKIN=y
|
|
CONFIG_HID_CHERRY=y
|
|
CONFIG_HID_CHICONY=y
|
|
CONFIG_HID_CYPRESS=y
|
|
CONFIG_HID_DRAGONRISE=y
|
|
CONFIG_HID_ELECOM=y
|
|
CONFIG_HID_EMS_FF=y
|
|
CONFIG_HID_EZKEY=y
|
|
CONFIG_HID_GREENASIA=y
|
|
CONFIG_HID_GYRATION=y
|
|
CONFIG_HID_HOLTEK=y
|
|
CONFIG_HID_KENSINGTON=y
|
|
CONFIG_HID_KEYTOUCH=y
|
|
CONFIG_HID_KYE=y
|
|
CONFIG_HID_LCPOWER=y
|
|
CONFIG_HID_LOGITECH=y
|
|
CONFIG_HID_LOGITECH_DJ=y
|
|
CONFIG_HID_MAGICMOUSE=y
|
|
CONFIG_HID_MICROSOFT=y
|
|
CONFIG_HID_MONTEREY=y
|
|
CONFIG_HID_MULTITOUCH=y
|
|
CONFIG_HID_NTRIG=y
|
|
CONFIG_HID_ORTEK=y
|
|
CONFIG_HID_PANTHERLORD=y
|
|
CONFIG_HID_PETALYNX=y
|
|
CONFIG_HID_PICOLCD=y
|
|
CONFIG_HID_PRIMAX=y
|
|
CONFIG_HID_PRODIKEYS=y
|
|
CONFIG_HID_ROCCAT=y
|
|
CONFIG_HID_SAITEK=y
|
|
CONFIG_HID_SAMSUNG=y
|
|
CONFIG_HID_SMARTJOYPLUS=y
|
|
CONFIG_HID_SONY=y
|
|
CONFIG_HID_SPEEDLINK=y
|
|
CONFIG_HID_SUNPLUS=y
|
|
CONFIG_HID_THRUSTMASTER=y
|
|
CONFIG_HID_TIVO=y
|
|
CONFIG_HID_TOPSEED=y
|
|
CONFIG_HID_TWINHAN=y
|
|
CONFIG_HID_UCLOGIC=y
|
|
CONFIG_HID_WACOM=y
|
|
CONFIG_HID_WALTOP=y
|
|
CONFIG_HID_WIIMOTE=y
|
|
CONFIG_HID_ZEROPLUS=y
|
|
CONFIG_HID_ZYDACRON=y
|
|
CONFIG_INPUT_EVDEV=y
|
|
CONFIG_INPUT_GPIO=y
|
|
CONFIG_INPUT_JOYSTICK=y
|
|
CONFIG_INPUT_MISC=y
|
|
CONFIG_INPUT_TABLET=y
|
|
CONFIG_INPUT_UINPUT=y
|
|
CONFIG_ION=y
|
|
CONFIG_JOYSTICK_XPAD=y
|
|
CONFIG_JOYSTICK_XPAD_FF=y
|
|
CONFIG_JOYSTICK_XPAD_LEDS=y
|
|
CONFIG_KALLSYMS_ALL=y
|
|
CONFIG_KSM=y
|
|
CONFIG_LOGIG940_FF=y
|
|
CONFIG_LOGIRUMBLEPAD2_FF=y
|
|
CONFIG_LOGITECH_FF=y
|
|
CONFIG_MD=y
|
|
CONFIG_MEDIA_SUPPORT=y
|
|
CONFIG_MSDOS_FS=y
|
|
CONFIG_PANIC_TIMEOUT=5
|
|
CONFIG_PANTHERLORD_FF=y
|
|
CONFIG_PERF_EVENTS=y
|
|
CONFIG_PM_DEBUG=y
|
|
CONFIG_PM_RUNTIME=y
|
|
CONFIG_PM_WAKELOCKS_LIMIT=0
|
|
CONFIG_POWER_SUPPLY=y
|
|
CONFIG_PSTORE=y
|
|
CONFIG_PSTORE_CONSOLE=y
|
|
CONFIG_PSTORE_RAM=y
|
|
CONFIG_SCHEDSTATS=y
|
|
CONFIG_SMARTJOYPLUS_FF=y
|
|
CONFIG_SND=y
|
|
CONFIG_SOUND=y
|
|
CONFIG_STRICT_KERNEL_RWX=y
|
|
CONFIG_SUSPEND_TIME=y
|
|
CONFIG_TABLET_USB_ACECAD=y
|
|
CONFIG_TABLET_USB_AIPTEK=y
|
|
CONFIG_TABLET_USB_GTCO=y
|
|
CONFIG_TABLET_USB_HANWANG=y
|
|
CONFIG_TABLET_USB_KBTAB=y
|
|
CONFIG_TASKSTATS=y
|
|
CONFIG_TASK_DELAY_ACCT=y
|
|
CONFIG_TASK_IO_ACCOUNTING=y
|
|
CONFIG_TASK_XACCT=y
|
|
CONFIG_TIMER_STATS=y
|
|
CONFIG_TMPFS=y
|
|
CONFIG_TMPFS_POSIX_ACL=y
|
|
CONFIG_UHID=y
|
|
CONFIG_USB_ANNOUNCE_NEW_DEVICES=y
|
|
CONFIG_USB_EHCI_HCD=y
|
|
CONFIG_USB_HIDDEV=y
|
|
CONFIG_USB_USBNET=y
|
|
CONFIG_VFAT_FS=y
|