kernel: set nx bit on module ro segments

Fixes #4757.
This commit is contained in:
Alexander Kjeldaas 2014-11-01 01:07:06 +01:00 committed by Franz Pletz
parent 4c5fdf42ed
commit 4c99d22f19

View File

@ -255,6 +255,9 @@ with stdenv.lib;
SQUASHFS_LZ4 y
''}
# Runtime security tests
DEBUG_SET_MODULE_RONX? y # Detect writes to read-only module pages
# Security related features.
STRICT_DEVMEM y # Filter access to /dev/mem
SECURITY_SELINUX_BOOTPARAM_VALUE 0 # Disable SELinux by default