Date: Wednesday, August 18, 2021 @ 21:30:17 Author: heftig Revision: 422330
Enable RANDOMIZE_KSTACK_OFFSET_DEFAULT Additional hardening at a minimal cost, as requested by Levente. Modified: linux/trunk/PKGBUILD linux/trunk/config ----------+ PKGBUILD | 2 +- config | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2021-08-18 21:07:28 UTC (rev 422329) +++ PKGBUILD 2021-08-18 21:30:17 UTC (rev 422330) @@ -26,7 +26,7 @@ 'C7E7849466FE2358343588377258734B41C31549' # David Runge <dv...@archlinux.org> ) sha256sums=('SKIP' - '6b3672ffafb1b29bde3eb76dc27d1a41cc2f8349068a6532717c3d4764a2d238') + '9c03905822c3c094207de7d4dbb7906d4fd59578b89ff8dc9e96d430c3870a81') export KBUILD_BUILD_HOST=archlinux export KBUILD_BUILD_USER=$pkgbase Modified: config =================================================================== --- config 2021-08-18 21:07:28 UTC (rev 422329) +++ config 2021-08-18 21:30:17 UTC (rev 422330) @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 5.13.9-arch1 Kernel Configuration +# Linux/x86 5.13.10-arch1 Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 11.1.0" CONFIG_CC_IS_GCC=y @@ -868,7 +868,7 @@ CONFIG_HAVE_ARCH_VMAP_STACK=y CONFIG_VMAP_STACK=y CONFIG_HAVE_ARCH_RANDOMIZE_KSTACK_OFFSET=y -# CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT is not set +CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y CONFIG_ARCH_HAS_STRICT_KERNEL_RWX=y CONFIG_STRICT_KERNEL_RWX=y CONFIG_ARCH_HAS_STRICT_MODULE_RWX=y