summaryrefslogblamecommitdiffstats
path: root/fragments/base/security
blob: b2ed99c58b82c72844bc10273d4bf096fdd6c81f (plain) (tree)
1
2
3
4
5
6
7
8
9
10
11
12
13












                                        


                                            


                                             
CONFIG_GCC_PLUGINS=y
CONFIG_GCC_PLUGIN_STRUCTLEAK=y
CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF_ALL=y

# CONFIG_COMPAT_BRK is not set
# CONFIG_SLAB_MERGE_DEFAULT is not set
CONFIG_SLAB_FREELIST_RANDOM=y
CONFIG_SLAB_FREELIST_HARDENED=y

CONFIG_HARDENED_USERCOPY=y
CONFIG_FORTIFY_SOURCE=y

CONFIG_IO_STRICT_DEVMEM=y

# Unsure about musl support/static binaries?
CONFIG_LEGACY_VSYSCALL_NONE=y

CONFIG_GENTOO_KERNEL_SELF_PROTECTION=y
CONFIG_GENTOO_KERNEL_SELF_PROTECTION_X86_64=y