[openwrt/openwrt] kernel: Activate CONFIG_SLAB_FREELIST_RANDOM

LEDE Commits lede-commits at lists.infradead.org
Wed May 3 06:14:28 PDT 2023


ansuel pushed a commit to openwrt/openwrt.git, branch master:
https://git.openwrt.org/467aa08f8ae0123adf973bb9e637a7763a53d60d

commit 467aa08f8ae0123adf973bb9e637a7763a53d60d
Author: Hauke Mehrtens <hauke at hauke-m.de>
AuthorDate: Sat Apr 22 18:45:43 2023 +0200

    kernel: Activate CONFIG_SLAB_FREELIST_RANDOM
    
    This activates CONFIG_SLAB_FREELIST_RANDOM.
    This option make the free list less predictable. This makes it harder to
    exploit heap based security vulnerabilities.
    
    This adds a little bit more code to the kernel and a small additional
    compute overhead.
    
    This option is activated in Debian by default.
    
    Signed-off-by: Hauke Mehrtens <hauke at hauke-m.de>
---
 target/linux/generic/config-5.10 | 2 +-
 target/linux/generic/config-5.15 | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/target/linux/generic/config-5.10 b/target/linux/generic/config-5.10
index 9645072a55..49325971f6 100644
--- a/target/linux/generic/config-5.10
+++ b/target/linux/generic/config-5.10
@@ -5464,7 +5464,7 @@ CONFIG_SIGNALFD=y
 # CONFIG_SLAB is not set
 CONFIG_SLABINFO=y
 CONFIG_SLAB_FREELIST_HARDENED=y
-# CONFIG_SLAB_FREELIST_RANDOM is not set
+CONFIG_SLAB_FREELIST_RANDOM=y
 CONFIG_SLAB_MERGE_DEFAULT=y
 # CONFIG_SLHC is not set
 # CONFIG_SLICOSS is not set
diff --git a/target/linux/generic/config-5.15 b/target/linux/generic/config-5.15
index 3d5a860673..c6af24ec66 100644
--- a/target/linux/generic/config-5.15
+++ b/target/linux/generic/config-5.15
@@ -5754,7 +5754,7 @@ CONFIG_SIGNALFD=y
 # CONFIG_SLAB is not set
 CONFIG_SLABINFO=y
 CONFIG_SLAB_FREELIST_HARDENED=y
-# CONFIG_SLAB_FREELIST_RANDOM is not set
+CONFIG_SLAB_FREELIST_RANDOM=y
 CONFIG_SLAB_MERGE_DEFAULT=y
 # CONFIG_SLHC is not set
 # CONFIG_SLICOSS is not set




More information about the lede-commits mailing list