Closed

initial commit of extracted grsecurity chroot hardening#1
andyrj wants to merge 34 commits intoGrapheneOS:4.11from andyrj:4.11

initial commit of extracted grsecurity chroot hardening#1

Closed

andyrj wants to merge 34 commits intoGrapheneOS:4.11from andyrj:4.11

+1,665-46

Commits on May 3, 2017

enable CONFIG_PANIC_ON_OOPS by default
thestinger
committedMay 3, 2017
enable CONFIG_DEBUG_LIST by default
thestinger
committedMay 3, 2017
enable SLAB_FREELIST_RANDOM by default
thestinger
committedMay 3, 2017
set kptr_restrict=2 by default
thestinger
committedMay 3, 2017
add __ro_after_init to slab_nomerge
thestinger
committedMay 3, 2017
add a SLAB_HARDENED configuration option
thestinger
committedMay 3, 2017
disable slab merging
thestinger
committedMay 3, 2017
add missing cache_from_obj !PageSlab check
thestinger
committedMay 3, 2017
real slab_equal_or_root check for !MEMCG_KMEM
thestinger
committedMay 3, 2017
bug on kmem_cache_free with the wrong cache
thestinger
committedMay 3, 2017
always perform cache_from_obj consistency checks
thestinger
committedMay 3, 2017
bug on !PageSlab && !PageCompound in ksize
thestinger
committedMay 3, 2017
add kmalloc alloc_size attributes
thestinger
committedMay 3, 2017
add vmalloc alloc_size attributes
thestinger
committedMay 3, 2017
arm64: zero the leading stack canary byte
thestinger
committedMay 3, 2017
x86_64: zero the leading stack canary byte
thestinger
committedMay 3, 2017
use get_random_long for the per-task stack canary
thestinger
committedMay 3, 2017
zero leading per-task stack canary byte on 64-bit
thestinger
committedMay 3, 2017
add slub free list XOR encryption
thestinger
committedMay 3, 2017
add fortified string.h functions
thestinger
committedMay 3, 2017
work around undefined memcmp in arch/arm64/kernel/vdso.c
thestinger
committedMay 3, 2017
work around undefined memcmp in kernel/kexec_file.c
thestinger
committedMay 3, 2017
work around undefined memcpy in drivers/net/ethernet/brocade/bna/bnad_ethtool.c
thestinger
committedMay 3, 2017
work around undefined memcpy in drivers/net/ethernet/brocade/bna/bfa_ioc.c
thestinger
committedMay 3, 2017
work around undefined memcpy calls in drivers/net/ethernet/qlogic/qlge/qlge_dbg.c
thestinger
committedMay 3, 2017
work around undefined memcpy in drivers/net/wireless/marvell/libertas/mesh.c
thestinger
committedMay 3, 2017
work around undefined memcpy in drivers/net/wireless/ray_cs.c
thestinger
committedMay 3, 2017
work around undefined memcpy in drivers/scsi/csiostor/csio_lnode.c
thestinger
committedMay 3, 2017

initial commit of extracted grsecurity chroot hardening#1andyrj wants to merge 34 commits intoGrapheneOS:4.11GrapheneOS/linux-hardened:4.11from andyrj:4.11andyrj/linux-hardened:4.11Copy head branch name to clipboard

Commits

Commits on May 3, 2017

Commits on May 4, 2017

initial commit of extracted grsecurity chroot hardening#1
andyrj wants to merge 34 commits intoGrapheneOS:4.11from andyrj:4.11