mirror of
https://github.com/aljazceru/kata-containers.git
synced 2026-01-03 22:44:24 +01:00
0bf4caf482
As per the comments in security.conf, the intention was to enable STACKPROTECTOR and STACKPROTECTOR_STRONG. The current config leaves them unset in the final .config and also prevents other fragments from overriding the setting. Set both to =y as indicated in the comments. Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
7 lines
192 B
Plaintext
7 lines
192 B
Plaintext
|
|
# Let's enable stack protection checks, and strong checks
|
|
# Estimated cost (detailed in the kernel config files)
|
|
# is maybe 2.3% for both
|
|
CONFIG_STACKPROTECTOR=y
|
|
CONFIG_STACKPROTECTOR_STRONG
|