In message: [linux-yocto][yocto-kernel-cache yocto-6.1|master][PATCH 0/1] add security options for aarch64 on 20/02/2024 Xiangyu Chen wrote:
> From: Xiangyu Chen <xiangyu.c...@windriver.com> > > Hi Bruce, > > After checking the kernel self protection wiki page[1], add recommended > options for > aarch64 platform. If someone needs aarch64 security related option, just turn > on the feature/security > in their kernel bbappend file. I had some patches in this area a while ago, but never did complete them, so luckily I was familiar with the options. And agreed, I still don't want these on by default, but they are fine to be made available along side the x86 ones (we really need to add more there as well). The options all look fine to me, and are indeed arm64 specific. I will merge them to all branches 6.1+, since I can't have a feature gap between 6.1 and master. Bruce > > Ref: > [1] > https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings#arm64 > > Thanks, > > Xiangyu > > Xiangyu Chen (1): > feature/security: add security options for aarch64/arm64 > > features/security/security-arm64.cfg | 29 ++++++++++++++++++++++++++++ > features/security/security.scc | 4 ++++ > 2 files changed, 33 insertions(+) > create mode 100644 features/security/security-arm64.cfg > > -- > 2.25.1 > > > >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#13591): https://lists.yoctoproject.org/g/linux-yocto/message/13591 Mute This Topic: https://lists.yoctoproject.org/mt/104462796/21656 Group Owner: linux-yocto+ow...@lists.yoctoproject.org Unsubscribe: https://lists.yoctoproject.org/g/linux-yocto/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
