Re: [RFC PATCH 9/9] powerpc/configs/skiroot: Enable some more hardening options

Joel Stanley writes: > On Thu, 16 Jan 2020 at 01:48, Michael Ellerman wrote: >> >> Enable more hardening options. >> >> Note BUG_ON_DATA_CORRUPTION selects DEBUG_LIST and is essentially just >> a synonym for it. >> >> DEBUG_SG, DEBUG_NOTIFIERS, DEBUG_LIST, DEBUG_CREDENTIALS and >> SCHED_STACK_END

Re: [RFC PATCH 9/9] powerpc/configs/skiroot: Enable some more hardening options

On Thu, 16 Jan 2020 at 01:48, Michael Ellerman wrote: > > Enable more hardening options. > > Note BUG_ON_DATA_CORRUPTION selects DEBUG_LIST and is essentially just > a synonym for it. > > DEBUG_SG, DEBUG_NOTIFIERS, DEBUG_LIST, DEBUG_CREDENTIALS and > SCHED_STACK_END_CHECK should all be low overhea

[RFC PATCH 9/9] powerpc/configs/skiroot: Enable some more hardening options

Enable more hardening options. Note BUG_ON_DATA_CORRUPTION selects DEBUG_LIST and is essentially just a synonym for it. DEBUG_SG, DEBUG_NOTIFIERS, DEBUG_LIST, DEBUG_CREDENTIALS and SCHED_STACK_END_CHECK should all be low overhead and just add a few extra checks. Unselecting SLAB_MERGE_DEFAULT ca