Kees Cook a284e43852 hardening: Enable KCFI and some other options ... Add some stuff that got missed along the way: - CONFIG_UNWIND_PATCH_PAC_INTO_SCS=y so SCS vs PAC is hardware selectable. - CONFIG_X86_KERNEL_IBT=y while a default, just be sure. - CONFIG_CFI_CLANG=y globally. - CONFIG_PAGE_TABLE_CHECK=y for userspace mapping sanity. Reviewed-by: Nathan Chancellor <nathan@kernel.org> Link: https://lore.kernel.org/r/20240501193709.make.982-kees@kernel.org Signed-off-by: Kees Cook <keescook@chromium.org>		2024-05-01 12:38:14 -07:00
..
hardening.config	hardening: Enable KCFI and some other options	2024-05-01 12:38:14 -07:00
i386_defconfig	x86/bugs: Rename CONFIG_RETHUNK => CONFIG_MITIGATION_RETHUNK	2024-01-10 10:52:29 +01:00
tiny.config	x86/config: Fix warning for 'make ARCH=x86_64 tinyconfig'	2024-03-21 10:09:41 +01:00
x86_64_defconfig	x86/defconfig: Enable CONFIG_DEBUG_ENTRY=y	2023-10-24 19:12:37 +02:00
xen.config	xen: x86: remove setting the obsolete config XEN_MAX_DOMAIN_MEMORY	2022-08-25 13:38:03 +02:00