Re: [PATCH v5 5/5] powerpc/configs: Enable STRICT_MODULE_RWX in skiroot_defconfig
From: Joel Stanley <joel@jms.id.au>
Date: 2019-10-31 00:08:27
On Wed, 30 Oct 2019 at 07:31, Russell Currey [off-list ref] wrote:
skiroot_defconfig is the only powerpc defconfig with STRICT_KERNEL_RWX enabled, and if you want memory protection for kernel text you'd want it for modules too, so enable STRICT_MODULE_RWX there. Signed-off-by: Russell Currey <redacted>
Acked-by: Joel Stanley <joel@jms.id.au>
quoted hunk ↗ jump to hunk
--- arch/powerpc/configs/skiroot_defconfig | 1 + 1 file changed, 1 insertion(+)diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig index 1253482a67c0..719d899081b3 100644 --- a/arch/powerpc/configs/skiroot_defconfig +++ b/arch/powerpc/configs/skiroot_defconfig@@ -31,6 +31,7 @@ CONFIG_PERF_EVENTS=y CONFIG_SLAB_FREELIST_HARDENED=y CONFIG_JUMP_LABEL=y CONFIG_STRICT_KERNEL_RWX=y +CONFIG_STRICT_MODULE_RWX=y CONFIG_MODULES=y CONFIG_MODULE_UNLOAD=y CONFIG_MODULE_SIG=y --2.23.0