1# Help: Common security options for PowerPC builds 2 3# This is the equivalent of booting with lockdown=integrity 4CONFIG_SECURITY=y 5CONFIG_SECURITYFS=y 6CONFIG_SECURITY_LOCKDOWN_LSM=y 7CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y 8CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y 9 10# These are some general, reasonably inexpensive hardening options 11CONFIG_HARDENED_USERCOPY=y 12CONFIG_FORTIFY_SOURCE=y 13CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y 14 15# UBSAN bounds checking is very cheap and good for hardening 16CONFIG_UBSAN=y 17# CONFIG_UBSAN_MISC is not set 18