diff options
Diffstat (limited to 'sys-kernel/cairn-sources/files/5.10.8/hardened-patches/0101-enable-INIT_ON_ALLOC_DEFAULT_ON-by-default.patch')
| -rw-r--r-- | sys-kernel/cairn-sources/files/5.10.8/hardened-patches/0101-enable-INIT_ON_ALLOC_DEFAULT_ON-by-default.patch | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/sys-kernel/cairn-sources/files/5.10.8/hardened-patches/0101-enable-INIT_ON_ALLOC_DEFAULT_ON-by-default.patch b/sys-kernel/cairn-sources/files/5.10.8/hardened-patches/0101-enable-INIT_ON_ALLOC_DEFAULT_ON-by-default.patch new file mode 100644 index 000000000000..7db5ebc6d47d --- /dev/null +++ b/sys-kernel/cairn-sources/files/5.10.8/hardened-patches/0101-enable-INIT_ON_ALLOC_DEFAULT_ON-by-default.patch @@ -0,0 +1,24 @@ +From 1df38669747417519926d9f6f5d83f949ec2a320 Mon Sep 17 00:00:00 2001 +From: Levente Polyak <levente@leventepolyak.net> +Date: Thu, 19 Sep 2019 19:02:23 +0200 +Subject: [PATCH 101/113] enable INIT_ON_ALLOC_DEFAULT_ON by default + +--- + security/Kconfig.hardening | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/security/Kconfig.hardening b/security/Kconfig.hardening +index a718487ad717..7e3fe39ed6a4 100644 +--- a/security/Kconfig.hardening ++++ b/security/Kconfig.hardening +@@ -190,6 +190,7 @@ config STACKLEAK_RUNTIME_DISABLE + + config INIT_ON_ALLOC_DEFAULT_ON + bool "Enable heap memory zeroing on allocation by default" ++ default yes + help + This has the effect of setting "init_on_alloc=1" on the kernel + command line. This can be disabled with "init_on_alloc=0". +-- +2.30.0 + |