-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Wed, 2018-09-05 at 19:43 +0000, Tomas Bortoli wrote: > > I noted that some hardening options are disable, by testing it against:
You can check https://salsa.debian.org/kernel-team/linux/merge_requests/26 for various hardening options. > > https://github.com/a13xp0p0v/kconfig-hardened-check > > such as: > > CONFIG_SLAB_FREELIST_HARDENED SLAB_FREELIST_HARDENED is enabled: https://sources.debian.org/src/linux/4.17.17-1/debian/config/config/#L5977 > > CONFIG_REFCOUNT_FULL > REFCOUNT_FULL is enabled on x86, not yet on other arches: https://sources.debian.org/src/linux/4.17.17-1/debian/config/kernelarch-x86/config/#L5 Regards, - -- Yves-Alexis -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAluRCyUACgkQ3rYcyPpX RFv7jwgA2s2AQsHlJX3Vl/G+ORoKmYb8Xy2Bpdiuwe/cxE5k/l6odj5BsuIS9T1S sA/3PBO89hLL+09r1Hs6q6rB7alLnaYlVEqQbWl7S1T6GzOIWQPNBA5CztdjJBTV /friUrayA4BgyAVgWo0lwzEiDazjLpQJ0PSG5PdH6yonMwcG7Aq3ieG1w9MG3p7V DoVluOhT8vcsWCj8d6g1LMloibq9buaU/vFcP4Uw9LacFEHcl3SvJiwALP5/QsvU Fr+fAZLSRR4JDP9a3uXPznGdjuTlZCv6vsB6RfNihmv6CdxNd09fe9eqLdpSzBG3 amXJEFsoX5VKeNvxtFHKm3MMxhg65w== =XcUR -----END PGP SIGNATURE-----