linux/kernel/configs
Marco Elver de2683e7fd hardening: Enable KFENCE in the hardening config
KFENCE is not a security mitigation mechanism (due to sampling), but has
the performance characteristics of unintrusive hardening techniques.
When used at scale, however, it improves overall security by allowing
kernel developers to detect heap memory-safety bugs cheaply.

Link: https://lkml.kernel.org/r/79B9A832-B3DE-4229-9D87-748B2CFB7D12@kernel.org
Cc: Matthieu Baerts <matttbe@kernel.org>
Cc: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Marco Elver <elver@google.com>
Link: https://lore.kernel.org/r/20240212130116.997627-1-elver@google.com
Signed-off-by: Kees Cook <keescook@chromium.org>
2024-02-20 20:47:32 -08:00
..
debug.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00
hardening.config hardening: Enable KFENCE in the hardening config 2024-02-20 20:47:32 -08:00
kvm_guest.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00
nopm.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00
rust.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00
tiny-base.config treewide: drop CONFIG_EMBEDDED 2023-08-21 13:46:25 -07:00
tiny.config mm/slab: rename CONFIG_SLAB to CONFIG_SLAB_DEPRECATED 2023-05-26 19:01:47 +02:00
x86_debug.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00
xen.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00