Kees Cook a284e43852 hardening: Enable KCFI and some other options ... Add some stuff that got missed along the way: - CONFIG_UNWIND_PATCH_PAC_INTO_SCS=y so SCS vs PAC is hardware selectable. - CONFIG_X86_KERNEL_IBT=y while a default, just be sure. - CONFIG_CFI_CLANG=y globally. - CONFIG_PAGE_TABLE_CHECK=y for userspace mapping sanity. Reviewed-by: Nathan Chancellor <nathan@kernel.org> Link: https://lore.kernel.org/r/20240501193709.make.982-kees@kernel.org Signed-off-by: Kees Cook <keescook@chromium.org>		2024-05-01 12:38:14 -07:00
..
hardening.config	hardening: Enable KCFI and some other options	2024-05-01 12:38:14 -07:00
i386_defconfig	…
tiny.config	…
x86_64_defconfig	…
xen.config	…