From: Peter Müller <peter.mueller@ipfire.org>
Date: Mon, 26 Dec 2022 19:25:39 +0000 (+0000)
Subject: linux: Disable syscalls that allows processes to r/w other processes' memory
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=00efe232b7118f834e3b38119f6b624bae18de9c;p=people%2Fms%2Fipfire-2.x.git

linux: Disable syscalls that allows processes to r/w other processes' memory

Backported from IPFire 3.x as 48931178ff83911c5bbc86194dea694845ae1608.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire
index 944a50b1ce..bea12a57bc 100644
--- a/config/kernel/kernel.config.x86_64-ipfire
+++ b/config/kernel/kernel.config.x86_64-ipfire
@@ -53,7 +53,7 @@ CONFIG_SYSVIPC_SYSCTL=y
 CONFIG_POSIX_MQUEUE=y
 CONFIG_POSIX_MQUEUE_SYSCTL=y
 # CONFIG_WATCH_QUEUE is not set
-CONFIG_CROSS_MEMORY_ATTACH=y
+# CONFIG_CROSS_MEMORY_ATTACH is not set
 # CONFIG_USELIB is not set
 # CONFIG_AUDIT is not set
 CONFIG_HAVE_ARCH_AUDITSYSCALL=y