* [merged] kconfig-make-strict_devmem-default-y-on-x86-and-arm64.patch removed from -mm tree
@ 2017-12-13 22:26 akpm
0 siblings, 0 replies; only message in thread
From: akpm @ 2017-12-13 22:26 UTC (permalink / raw)
To: hpa, keescook, labbott, mark.rutland, mingo, mm-commits,
rmk+kernel, tglx, will.deacon
The patch titled
Subject: Kconfig: make STRICT_DEVMEM default-y on x86 and arm64
has been removed from the -mm tree. Its filename was
kconfig-make-strict_devmem-default-y-on-x86-and-arm64.patch
This patch was dropped because it was merged into mainline or a subsystem tree
------------------------------------------------------
From: Kees Cook <keescook@chromium.org>
Subject: Kconfig: make STRICT_DEVMEM default-y on x86 and arm64
Distros have been shipping with CONFIG_STRICT_DEVMEM=y for years now. It
is probably time to flip this default for x86 and arm64.
Link: http://lkml.kernel.org/r/20171201201000.GA44539@beast
Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: Mark Rutland <mark.rutland@arm.com>
Cc: Will Deacon <will.deacon@arm.com>
Cc: Laura Abbott <labbott@redhat.com>
Cc: Russell King <rmk+kernel@arm.linux.org.uk>
Cc: Ingo Molnar <mingo@elte.hu>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: "H. Peter Anvin" <hpa@zytor.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
---
lib/Kconfig.debug | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff -puN lib/Kconfig.debug~kconfig-make-strict_devmem-default-y-on-x86-and-arm64 lib/Kconfig.debug
--- a/lib/Kconfig.debug~kconfig-make-strict_devmem-default-y-on-x86-and-arm64
+++ a/lib/Kconfig.debug
@@ -1991,7 +1991,7 @@ config STRICT_DEVMEM
bool "Filter access to /dev/mem"
depends on MMU && DEVMEM
depends on ARCH_HAS_DEVMEM_IS_ALLOWED
- default y if TILE || PPC
+ default y if TILE || PPC || X86 || ARM64
---help---
If this option is disabled, you allow userspace (root) access to all
of memory, including kernel and userspace memory. Accidental
_
Patches currently in -mm which might be from keescook@chromium.org are
makefile-move-stack-protector-compiler-breakage-test-earlier.patch
makefile-move-stack-protector-availability-out-of-kconfig.patch
makefile-introduce-config_cc_stackprotector_auto.patch
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2017-12-13 22:26 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2017-12-13 22:26 [merged] kconfig-make-strict_devmem-default-y-on-x86-and-arm64.patch removed from -mm tree akpm
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.