Kconfig (9c1852b459f04f6309e40d1d167512b0a5598529) Kconfig (c61f13eaa1ee17728c41370100d2d45c254ce76f)
1#
2# General architecture dependent options
3#
4
5config KEXEC_CORE
6 bool
7
8config HAVE_IMA_KEXEC

--- 396 unchanged lines hidden (view full) ---

405
406 Note that entropy extracted this way is not cryptographically
407 secure!
408
409 This plugin was ported from grsecurity/PaX. More information at:
410 * https://grsecurity.net/
411 * https://pax.grsecurity.net/
412
1#
2# General architecture dependent options
3#
4
5config KEXEC_CORE
6 bool
7
8config HAVE_IMA_KEXEC

--- 396 unchanged lines hidden (view full) ---

405
406 Note that entropy extracted this way is not cryptographically
407 secure!
408
409 This plugin was ported from grsecurity/PaX. More information at:
410 * https://grsecurity.net/
411 * https://pax.grsecurity.net/
412
413config GCC_PLUGIN_STRUCTLEAK
414 bool "Force initialization of variables containing userspace addresses"
415 depends on GCC_PLUGINS
416 help
417 This plugin zero-initializes any structures that containing a
418 __user attribute. This can prevent some classes of information
419 exposures.
420
421 This plugin was ported from grsecurity/PaX. More information at:
422 * https://grsecurity.net/
423 * https://pax.grsecurity.net/
424
425config GCC_PLUGIN_STRUCTLEAK_VERBOSE
426 bool "Report forcefully initialized variables"
427 depends on GCC_PLUGIN_STRUCTLEAK
428 depends on !COMPILE_TEST
429 help
430 This option will cause a warning to be printed each time the
431 structleak plugin finds a variable it thinks needs to be
432 initialized. Since not all existing initializers are detected
433 by the plugin, this can produce false positive warnings.
434
413config HAVE_CC_STACKPROTECTOR
414 bool
415 help
416 An arch should select this symbol if:
417 - its compiler supports the -fstack-protector option
418 - it has implemented a stack canary (e.g. __stack_chk_guard)
419
420config CC_STACKPROTECTOR

--- 364 unchanged lines hidden --- 		435config HAVE_CC_STACKPROTECTOR
436 bool
437 help
438 An arch should select this symbol if:
439 - its compiler supports the -fstack-protector option
440 - it has implemented a stack canary (e.g. __stack_chk_guard)
441
442config CC_STACKPROTECTOR

--- 364 unchanged lines hidden ---