Skip to content

[redhat] New configs in security/Kconfig.hardening

CKI ARK Bot requested to merge configs/os-build/2024-05-20/security/Kconfig.hardening into os-build

edit: V2 removes this config option file from rhel-pending as it has been reverted upstream.

Hi,

As part of the ongoing rebase effort, the following configuration options need to be reviewed.

As a reminder, the ARK configuration flow involves moving unreviewed configuration options from the pending directory to the ark directory. In the diff below, options are removed from the pending directory and added to the ark hierarchy. The final options that need to be ACKed are the files that are being added to the ark hierarchy.

If the value for a file that is added should be changed, please reply with a better option.

Symbol: INIT_MLOCKED_ON_FREE_DEFAULT_ON [=n] Type : bool Defined at security/Kconfig.hardening:258 Prompt: Enable mlocked memory zeroing on free Depends on: !KMSAN [=n] Location: -> Security options -> Kernel hardening options -> Memory initialization -> Enable mlocked memory zeroing on free (INIT_MLOCKED_ON_FREE_DEFAULT_ON [=n])

Commit: ba42b524 (mm: init_mlocked_on_free_v3)

Signed-off-by: Fedora Kernel Team kernel-team@fedoraproject.org

Edited by Patrick Talbert

Merge request reports