diff options
Diffstat (limited to 'sys-kernel/cairn-sources/files/5.10.7/hardened-patches/0031-disable-COMPAT_BRK-by-default.patch')
| -rw-r--r-- | sys-kernel/cairn-sources/files/5.10.7/hardened-patches/0031-disable-COMPAT_BRK-by-default.patch | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/sys-kernel/cairn-sources/files/5.10.7/hardened-patches/0031-disable-COMPAT_BRK-by-default.patch b/sys-kernel/cairn-sources/files/5.10.7/hardened-patches/0031-disable-COMPAT_BRK-by-default.patch new file mode 100644 index 000000000000..91302783b68e --- /dev/null +++ b/sys-kernel/cairn-sources/files/5.10.7/hardened-patches/0031-disable-COMPAT_BRK-by-default.patch @@ -0,0 +1,24 @@ +From c64d496a1a963569e384211b00970a79b30f8e62 Mon Sep 17 00:00:00 2001 +From: Daniel Micay <danielmicay@gmail.com> +Date: Sun, 7 May 2017 18:28:33 -0400 +Subject: [PATCH 031/113] disable COMPAT_BRK by default + +--- + init/Kconfig | 1 - + 1 file changed, 1 deletion(-) + +diff --git a/init/Kconfig b/init/Kconfig +index 21f0b6926cf3..4f5827e10be3 100644 +--- a/init/Kconfig ++++ b/init/Kconfig +@@ -1866,7 +1866,6 @@ config SLUB_MEMCG_SYSFS_ON + + config COMPAT_BRK + bool "Disable heap randomization" +- default y + help + Randomizing heap placement makes heap exploits harder, but it + also breaks ancient binaries (including anything libc5 based). +-- +2.30.0 + |