Commit 0f7cda2b authored by Kees Cook's avatar Kees Cook Committed by Ingo Molnar

Kconfig: Make STRICT_DEVMEM default-y on x86 and arm64

Distros have been shipping with CONFIG_STRICT_DEVMEM=y for years now. It
is probably time to flip this default for x86 and arm64.
Signed-off-by: default avatarKees Cook <keescook@chromium.org>
Acked-by: default avatarLaura Abbott <labbott@redhat.com>
Cc: Andrew Morton <akpm@linux-foundation.org>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Mark Rutland <mark.rutland@arm.com>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Will Deacon <will.deacon@arm.com>
Cc: kernel-hardening@lists.openwall.com
Link: http://lkml.kernel.org/r/20171201201000.GA44539@beastSigned-off-by: default avatarIngo Molnar <mingo@kernel.org>
parent 50c4c4e2
...@@ -1985,7 +1985,7 @@ config STRICT_DEVMEM ...@@ -1985,7 +1985,7 @@ config STRICT_DEVMEM
bool "Filter access to /dev/mem" bool "Filter access to /dev/mem"
depends on MMU && DEVMEM depends on MMU && DEVMEM
depends on ARCH_HAS_DEVMEM_IS_ALLOWED depends on ARCH_HAS_DEVMEM_IS_ALLOWED
default y if TILE || PPC default y if TILE || PPC || X86 || ARM64
---help--- ---help---
If this option is disabled, you allow userspace (root) access to all If this option is disabled, you allow userspace (root) access to all
of memory, including kernel and userspace memory. Accidental of memory, including kernel and userspace memory. Accidental
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment