aboutsummaryrefslogtreecommitdiff
path: root/debian.master/config/enforce
diff options
context:
space:
mode:
authorKees Cook <kees.cook@canonical.com>2011-08-22 15:20:49 -0700
committerLeann Ogasawara <leann.ogasawara@canonical.com>2011-08-30 14:33:52 -0700
commitcd36dc8ddb2ca602ad1dbc6407f1180cb35c7f96 (patch)
tree0a7fecfab31de80e4e418ec4511ec22eba9dd1a9 /debian.master/config/enforce
parenta2b6fc86fc443d379343cfc03fabcf742cf064fb (diff)
UBUNTU: [Config] enable and enforce SECCOMP_FILTER on x86
Signed-off-by: Kees Cook <kees.cook@canonical.com> Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
Diffstat (limited to 'debian.master/config/enforce')
-rw-r--r--debian.master/config/enforce1
1 files changed, 1 insertions, 0 deletions
diff --git a/debian.master/config/enforce b/debian.master/config/enforce
index 7c3306b8b2b..b51506522d8 100644
--- a/debian.master/config/enforce
+++ b/debian.master/config/enforce
@@ -14,6 +14,7 @@ value CONFIG_SYN_COOKIES y
value CONFIG_DEFAULT_SECURITY_APPARMOR y
# For architectures which support this option ensure it is enabled.
!exists CONFIG_SECCOMP | value CONFIG_SECCOMP y
+!exists CONFIG_HAVE_SECCOMP_FILTER | value CONFIG_SECCOMP_FILTER y
!exists CONFIG_CC_STACKPROTECTOR | value CONFIG_CC_STACKPROTECTOR y
!exists CONFIG_DEBUG_RODATA | value CONFIG_DEBUG_RODATA y
!exists CONFIG_DEBUG_SET_MODULE_RONX | value CONFIG_DEBUG_SET_MODULE_RONX y