Re: [PATCH 1/3] Kconfig: Create "kernel hardening" config area

2019-04-11 Thread Kees Cook
On Thu, Apr 11, 2019 at 1:51 AM Masahiro Yamada wrote: > > On Thu, Apr 11, 2019 at 1:16 AM Kees Cook wrote: > > diff --git a/scripts/gcc-plugins/Kconfig b/scripts/gcc-plugins/Kconfig > > index 74271dba4f94..01874ef0f883 100644 > > --- a/scripts/gcc-plugins/Kconfig > > +++ b/scripts/gcc-plugins/Kc

Re: [PATCH 1/3] Kconfig: Create "kernel hardening" config area

2019-04-11 Thread Masahiro Yamada
On Thu, Apr 11, 2019 at 1:16 AM Kees Cook wrote: > diff --git a/scripts/gcc-plugins/Kconfig b/scripts/gcc-plugins/Kconfig > index 74271dba4f94..01874ef0f883 100644 > --- a/scripts/gcc-plugins/Kconfig > +++ b/scripts/gcc-plugins/Kconfig > @@ -13,10 +13,11 @@ config HAVE_GCC_PLUGINS > An a

[PATCH 1/3] Kconfig: Create "kernel hardening" config area

2019-04-10 Thread Kees Cook
Right now kernel hardening options are scattered around various Kconfig files. This can be a central place to collect these kinds of options going forward. Signed-off-by: Kees Cook --- scripts/gcc-plugins/Kconfig | 70 ++- security/Kconfig| 2 + security/Kcon