It is an x86_64 specific feature. Signed-off-by: Mikko Rapeli <[email protected]> --- features/security/security-x86_64.cfg | 3 +++ features/security/security.cfg | 1 - 2 files changed, 3 insertions(+), 1 deletion(-)
diff --git a/features/security/security-x86_64.cfg b/features/security/security-x86_64.cfg index 21bf3bca3cf7..5372e0de0bfd 100644 --- a/features/security/security-x86_64.cfg +++ b/features/security/security-x86_64.cfg @@ -5,3 +5,6 @@ CONFIG_LEGACY_VSYSCALL_NONE=y # Meltdown and Spectre CONFIG_MITIGATION_PAGE_TABLE_ISOLATION=y CONFIG_MITIGATION_RETPOLINE=y + +# Randomize the kernel memory sections +CONFIG_RANDOMIZE_MEMORY=y diff --git a/features/security/security.cfg b/features/security/security.cfg index cb9b75cb1071..ea9be8853a56 100644 --- a/features/security/security.cfg +++ b/features/security/security.cfg @@ -46,7 +46,6 @@ CONFIG_PAGE_POISONING=y # Kernel Address Space Layout Randomization (KASLR) CONFIG_RANDOMIZE_BASE=y -CONFIG_RANDOMIZE_MEMORY=y # Direct kernel overwrite CONFIG_STRICT_KERNEL_RWX=y -- 2.34.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#16145): https://lists.yoctoproject.org/g/linux-yocto/message/16145 Mute This Topic: https://lists.yoctoproject.org/mt/117176763/21656 Group Owner: [email protected] Unsubscribe: https://lists.yoctoproject.org/g/linux-yocto/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
