Kees Cook a284e43852 hardening: Enable KCFI and some other options ...

Add some stuff that got missed along the way:

- CONFIG_UNWIND_PATCH_PAC_INTO_SCS=y so SCS vs PAC is hardware
  selectable.

- CONFIG_X86_KERNEL_IBT=y while a default, just be sure.

- CONFIG_CFI_CLANG=y globally.

- CONFIG_PAGE_TABLE_CHECK=y for userspace mapping sanity.

Reviewed-by: Nathan Chancellor <nathan@kernel.org>
Link: https://lore.kernel.org/r/20240501193709.make.982-kees@kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>

2024-05-01 12:38:14 -07:00

..

hardening.config

hardening: Enable KCFI and some other options

2024-05-01 12:38:14 -07:00

i386_defconfig

x86/bugs: Rename CONFIG_RETHUNK => CONFIG_MITIGATION_RETHUNK

2024-01-10 10:52:29 +01:00

tiny.config

x86/config: Fix warning for 'make ARCH=x86_64 tinyconfig'

2024-03-21 10:09:41 +01:00

x86_64_defconfig

x86/defconfig: Enable CONFIG_DEBUG_ENTRY=y

2023-10-24 19:12:37 +02:00

xen.config

xen: x86: remove setting the obsolete config XEN_MAX_DOMAIN_MEMORY

2022-08-25 13:38:03 +02:00