diff --git a/kernel/configs/fragments/common/base.conf b/kernel/configs/fragments/common/base.conf index 55289654d..b75513329 100644 --- a/kernel/configs/fragments/common/base.conf +++ b/kernel/configs/fragments/common/base.conf @@ -48,4 +48,4 @@ CONFIG_RANDOMIZE_BASE=y # This can still be dynamically disabled on the kernel command line/kata config if needed. # Disable for now, as it upsets the entropy test, and we need to improve those: FIXME: see: # https://github.com/kata-containers/tests/issues/1543 -# CONFIG_RANDOM_TRUST_CPU is not set +# RANDOM_TRUST_CPU=y diff --git a/kernel/configs/fragments/common/security.conf b/kernel/configs/fragments/common/security.conf index c5836b745..6f3043503 100644 --- a/kernel/configs/fragments/common/security.conf +++ b/kernel/configs/fragments/common/security.conf @@ -3,4 +3,4 @@ # Estimated cost (detailed in the kernel config files) # is maybe 2.3% for both CONFIG_STACKPROTECTOR=y -CONFIG_STACKPROTECTOR_STRONG +CONFIG_STACKPROTECTOR_STRONG=y