diff options
| author | Roger Liao <rogerliao@google.com> | 2021-09-22 11:02:40 +0800 |
|---|---|---|
| committer | Roger Liao <rogerliao@google.com> | 2021-11-01 08:07:08 +0000 |
| commit | bcf7a4add5b7337c5f3ad8be2c9a5559c99ce1b9 (patch) | |
| tree | 41f85a4189431a46b4f6eab9912b8a22be1788a8 | |
| parent | bd82ad82242c3aab965a4a1d628c313b738857a0 (diff) | |
| download | msm-android-msm-barbet-4.19-s-v2-beta-1.tar.gz | |
arm64: configs: Disable CONFIG_SECURITY_SMACKandroid-s-v2-beta-1_r0.5android-msm-barbet-4.19-s-v2-beta-1
Security hardening:
1. unset CONFIG_SECURITY_SMACK which implicitly enable CONFIG_NETLABEL
2. set CONFIG_SECURITY_NETWORK which CONFIG_SECURITY_SELINUX depends on
Bug: 198690429
Signed-off-by: Roger Liao <rogerliao@google.com>
Change-Id: Ib259713644bbd3cba43ef44edf8fc34fe11bbac3
| -rw-r--r-- | arch/arm64/configs/redbull_defconfig | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/arch/arm64/configs/redbull_defconfig b/arch/arm64/configs/redbull_defconfig index 6ff85b48339c..a69c68564556 100644 --- a/arch/arm64/configs/redbull_defconfig +++ b/arch/arm64/configs/redbull_defconfig @@ -668,13 +668,13 @@ CONFIG_NLS_CODEPAGE_437=y CONFIG_NLS_ISO8859_1=y CONFIG_UNICODE=y CONFIG_SECURITY=y +CONFIG_SECURITY_NETWORK=y CONFIG_HARDENED_USERCOPY=y CONFIG_HARDENED_USERCOPY_PAGESPAN=y CONFIG_FORTIFY_SOURCE=y CONFIG_STATIC_USERMODEHELPER=y CONFIG_STATIC_USERMODEHELPER_PATH="" CONFIG_SECURITY_SELINUX=y -CONFIG_SECURITY_SMACK=y CONFIG_INIT_STACK_ALL_ZERO=y CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y CONFIG_CRYPTO_NIAP_FPT_TST_EXT_11=y |