Re: [PATCH v10 08/10] powerpc/configs: Enable STRICT_MODULE_RWX in skiroot_defconfig
From: Christophe Leroy <hidden>
Date: 2021-03-30 05:27:44
Le 30/03/2021 à 06:51, Jordan Niethe a écrit :
From: Russell Currey <redacted> skiroot_defconfig is the only powerpc defconfig with STRICT_KERNEL_RWX enabled, and if you want memory protection for kernel text you'd want it for modules too, so enable STRICT_MODULE_RWX there.
Maybe we could now selectt ARCH_OPTIONAL_KERNEL_RWX_DEFAULT in arch/powerpc/Kconfig. Then this change would not be necessary. Would be in line with https://github.com/linuxppc/issues/issues/223
quoted hunk ↗ jump to hunk
Acked-by: Joel Stanley <redacted> Signed-off-by: Russell Currey <redacted> Signed-off-by: Jordan Niethe <redacted> --- arch/powerpc/configs/skiroot_defconfig | 1 + 1 file changed, 1 insertion(+)diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig index b806a5d3a695..50fe06cb3a31 100644 --- a/arch/powerpc/configs/skiroot_defconfig +++ b/arch/powerpc/configs/skiroot_defconfig@@ -50,6 +50,7 @@ CONFIG_CMDLINE="console=tty0 console=hvc0 ipr.fast_reboot=1 quiet" # CONFIG_PPC_MEM_KEYS is not set CONFIG_JUMP_LABEL=y CONFIG_STRICT_KERNEL_RWX=y +CONFIG_STRICT_MODULE_RWX=y CONFIG_MODULES=y CONFIG_MODULE_UNLOAD=y CONFIG_MODULE_SIG_FORCE=y