From 6390333332628437c142fb5e93b1b2f3aaa54b6c Mon Sep 17 00:00:00 2001
From: Wynn Wolf Arbor
Date: Mon, 23 Dec 2019 12:37:32 +0100
Subject: Initial import

---
 fragments/base/security | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 fragments/base/security

(limited to 'fragments/base/security')

diff --git a/fragments/base/security b/fragments/base/security
new file mode 100644
index 0000000..5d8b95c
--- /dev/null
+++ b/fragments/base/security
@@ -0,0 +1,14 @@
+CONFIG_REFCOUNT_FULL=y
+CONFIG_GCC_PLUGINS=y
+CONFIG_GCC_PLUGIN_STRUCTLEAK=y
+CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF_ALL=y
+
+# CONFIG_COMPAT_BRK is not set
+# CONFIG_SLAB_MERGE_DEFAULT is not set
+CONFIG_SLAB_FREELIST_RANDOM=y
+CONFIG_SLAB_FREELIST_HARDENED=y
+
+CONFIG_HARDENED_USERCOPY=y
+CONFIG_FORTIFY_SOURCE=y
+
+CONFIG_IO_STRICT_DEVMEM=y
-- 
cgit v1.2.3-2-gb3c3