KASAN_HW_TAGS is not effective when KASAN is not selected. On arm64 with HW support for memory tagging overhead is low and thus KASAN can be enabled in production. Detected with merge_config.sh which warns when configs are not in the effective .config.
Signed-off-by: Mikko Rapeli <[email protected]> --- features/security/security-arm64.cfg | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/features/security/security-arm64.cfg b/features/security/security-arm64.cfg index bde2a0ee3592..8c20ad249438 100644 --- a/features/security/security-arm64.cfg +++ b/features/security/security-arm64.cfg @@ -17,9 +17,12 @@ CONFIG_ARM64_PTR_AUTH_KERNEL=y # Available in ARMv8.5 and later. CONFIG_ARM64_BTI=y CONFIG_ARM64_MTE=y -CONFIG_KASAN_HW_TAGS=y CONFIG_ARM64_E0PD=y +# HW based, can be used in production +CONFIG_KASAN=y +CONFIG_KASAN_HW_TAGS=y + # Disabled with gcc # https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106671 # https://lore.kernel.org/all/20250714195205.GA3723043@ax162/ -- 2.34.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#16147): https://lists.yoctoproject.org/g/linux-yocto/message/16147 Mute This Topic: https://lists.yoctoproject.org/mt/117176765/21656 Group Owner: [email protected] Unsubscribe: https://lists.yoctoproject.org/g/linux-yocto/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
