Penny Zheng 538528fa9a configs: re-organize security-related configs ...

There exists a few security-related configs, which are x86-64 specific.
CONFIG_LEGACY_VSYSCALL_NONE=y
CONFIG_RETPOLINE=y

CONFIG_RELOCATABLE and CONFIG_RANDOMIZE_BASE are kinds of tangled on
aarch64, if CONFIG_RANDOMIZE_BASE=y, then CONFIG_RELOCATABLE will be
selected automatically.
CONFIG_RANDOMIZE_BASE will randomize the virtual address at which the
kernel image is loaded, which as a security feature could deter exploit
attempts relying on knowledge of the location of kernel internals.

Fixes: #1004

Signed-off-by: Penny Zheng <penny.zheng@arm.com>

2020-04-21 14:47:27 +08:00

..

arm64

config: re-organize acpi related config

2020-04-21 14:47:15 +08:00

common

configs: re-organize security-related configs

2020-04-21 14:47:27 +08:00

gpu

kernel: support build guest kernel for gpu

2020-03-20 02:18:47 +08:00

x86_64

configs: re-organize security-related configs

2020-04-21 14:47:27 +08:00

whitelist.conf

kernel: Remove CONFIG_INET6 options from fragments

2020-02-10 12:14:39 -08:00