From 2e3ea6d2066fdbb7955df61711c7a0c372c6626b Mon Sep 17 00:00:00 2001 From: Javier Tia Date: Tue, 3 Oct 2023 16:54:38 -0600 Subject: [PATCH] armsr: armv8: Enable KASLR in kernel 6.1 In userspace, ASLR is enabled, but it's missing to enable KASLR on the kernel side to improve security as part of SystemReady recommendations. Signed-off-by: Javier Tia --- target/linux/armsr/armv8/config-6.1 | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/target/linux/armsr/armv8/config-6.1 b/target/linux/armsr/armv8/config-6.1 index 4eab79bba9..0ead973064 100644 --- a/target/linux/armsr/armv8/config-6.1 +++ b/target/linux/armsr/armv8/config-6.1 @@ -599,6 +599,10 @@ CONFIG_QUEUED_RWLOCKS=y CONFIG_QUEUED_SPINLOCKS=y CONFIG_RASPBERRYPI_FIRMWARE=y CONFIG_RASPBERRYPI_POWER=y +CONFIG_RANDOMIZE_BASE=y +CONFIG_RANDOMIZE_MODULE_REGION_FULL=y +CONFIG_RANDSTRUCT_NONE=y +CONFIG_RELOCATABLE=y # CONFIG_RAVB is not set CONFIG_RCAR_DMAC=y # CONFIG_RCAR_GEN3_THERMAL is not set