enable SECURITY_TIOCSTI_RESTRICT by default

GrapheneOS · May 4, 2017 · 27080a8 · 27080a8
1 parent 4385712
commit 27080a8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/security/Kconfig b/security/Kconfig
@@ -20,7 +20,7 @@ config SECURITY_DMESG_RESTRICT
 
 config SECURITY_TIOCSTI_RESTRICT
 	bool "Restrict unprivileged use of tiocsti command injection"
-	default n
+	default y
 	help
 	  This enforces restrictions on unprivileged users injecting commands
 	  into other processes which share a tty session using the TIOCSTI