7 lines
222 B
Text
7 lines
222 B
Text
# Basic kernel hardening options (specific to arm)
|
|
|
|
# Make sure PXN/PAN emulation is enabled.
|
|
CONFIG_CPU_SW_DOMAIN_PAN=y
|
|
|
|
# Dangerous; old interfaces and needless additional attack surface.
|
|
# CONFIG_OABI_COMPAT is not set
|