From: Peter Müller <peter.mueller@ipfire.org>
Date: Tue, 9 Jun 2020 17:55:58 +0000 (+0000)
Subject: kernel: enable CONFIG_FORTIFY_SOUCRE on aarch64
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3eb393ff2e44a97d32c91621b093253ebde6d1fa;p=people%2Fms%2Fipfire-2.x.git

kernel: enable CONFIG_FORTIFY_SOUCRE on aarch64

Partially fixes: #12369

Cc: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
---

diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kernel.config.aarch64-ipfire
index 35f071bda3..605c0886ab 100644
--- a/config/kernel/kernel.config.aarch64-ipfire
+++ b/config/kernel/kernel.config.aarch64-ipfire
@@ -6543,7 +6543,7 @@ CONFIG_SECURITY_NETWORK_XFRM=y
 CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
 CONFIG_HARDENED_USERCOPY=y
 CONFIG_HARDENED_USERCOPY_PAGESPAN=y
-# CONFIG_FORTIFY_SOURCE is not set
+CONFIG_FORTIFY_SOURCE=y
 # CONFIG_STATIC_USERMODEHELPER is not set
 # CONFIG_SECURITY_SMACK is not set
 # CONFIG_SECURITY_TOMOYO is not set