From f7574bcbaf949962e1b7cd8bd063b666dc24f084 Mon Sep 17 00:00:00 2001
From: Wynn Wolf Arbor
Date: Sun, 16 Feb 2020 11:24:22 +0100
Subject: Improve security by disabling vsyscall table for legacy apps

---
 fragments/base/security | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'fragments/base')

diff --git a/fragments/base/security b/fragments/base/security
index 5d8b95c..ba75a03 100644
--- a/fragments/base/security
+++ b/fragments/base/security
@@ -12,3 +12,6 @@ CONFIG_HARDENED_USERCOPY=y
 CONFIG_FORTIFY_SOURCE=y
 
 CONFIG_IO_STRICT_DEVMEM=y
+
+# Unsure about musl support/static binaries?
+CONFIG_LEGACY_VSYSCALL_NONE=y
-- 
cgit v1.2.3-2-gb3c3