From c189ce42636f98e90b42ff67fdaebe87a3aaeab6 Mon Sep 17 00:00:00 2001 From: Jan Alexander Steffens Date: Mon, 18 Nov 2019 21:33:26 +0000 Subject: [PATCH] Enable INIT_ON_ALLOC_DEFAULT_ON https://outflux.net/blog/archives/2019/11/14/security-things-in-linux-v5-3/ --- PKGBUILD | 2 +- config | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/PKGBUILD b/PKGBUILD index a137423..0c5f99d 100644 --- a/PKGBUILD +++ b/PKGBUILD @@ -25,7 +25,7 @@ validpgpkeys=( '8218F88849AAC522E94CF470A5E9288C4FA415FA' # Jan Alexander Steffens (heftig) ) sha256sums=('SKIP' - '54bd002b40030609bfb236c35d2a23d23e426edd1f84dd448afbadd1b0aacb55') + '10ee7800902b1d82f9c184b367c9d904f4dc48f6d9ce3277327e825d7ab690d1') export KBUILD_BUILD_HOST=archlinux export KBUILD_BUILD_USER=$pkgbase diff --git a/config b/config index 4642c39..81a87d1 100644 --- a/config +++ b/config @@ -9826,7 +9826,7 @@ CONFIG_GCC_PLUGIN_STRUCTLEAK=y CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF_ALL=y # CONFIG_GCC_PLUGIN_STRUCTLEAK_VERBOSE is not set # CONFIG_GCC_PLUGIN_STACKLEAK is not set -# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set +CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y # CONFIG_INIT_ON_FREE_DEFAULT_ON is not set # end of Memory initialization # end of Kernel hardening options