]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/commit - config/kernel/kernel.config.aarch64-ipfire
linux: Enable seccomp filter on ARM
authorPeter Müller <peter.mueller@ipfire.org>
Mon, 19 Sep 2022 12:35:41 +0000 (12:35 +0000)
committerPeter Müller <peter.mueller@ipfire.org>
Mon, 3 Oct 2022 21:57:47 +0000 (21:57 +0000)
commit16eb2d5379757076c23b4cdd14a8af595fd9d1bc
tree48cda671a3a0fcba278245712f948208de4bd0a9
parent25a3d87645609b3deffdc45a153eb2e2696032f9
linux: Enable seccomp filter on ARM

Since last time we checked, the kernel's security features on ARM have
improved notably (see CONFIG_RANDOMIZE_BASE discussion). This patch
therefore proposes to give the seccomp filter on both 32- and 64-bit ARM
another try, since it provides significant security benefit to
applications using it.

Due to operational constraints, rootfile changes have been omitted, and
will be conducted, should this patch be approved.

Note to future self: Once this patch is approved, applications using
seccomp (OpenSSH, Tor) need to be updated/shipped on ARM.

Fixes: #12366
Fixes: #12370
Cc: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
config/kernel/kernel.config.aarch64-ipfire
config/kernel/kernel.config.armv6l-ipfire