linux-gbmc: Add some more sane defaults
Some extra general hardening flags around memory allocation and stack
protection.
Change-Id: Ie9e5e304fff81dbf8d92d5256afbaa9404713d00
Signed-off-by: William A. Kennington III <wak@google.com>
diff --git a/recipes-kernel/linux/files/defconfig b/recipes-kernel/linux/files/defconfig
index 9906c4c..73bf840 100644
--- a/recipes-kernel/linux/files/defconfig
+++ b/recipes-kernel/linux/files/defconfig
@@ -16,6 +16,10 @@
CONFIG_BINFMT_SCRIPT=y
CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS=y
CONFIG_COREDUMP=y
+CONFIG_SLAB_MERGE_DEFAULT=y
+CONFIG_SLAB_FREELIST_RANDOM=y
+CONFIG_SLAB_FREELIST_HARDENED=y
+CONFIG_SLUB_CPU_PARTIAL=y
CONFIG_FHANDLE=y
CONFIG_POSIX_TIMERS=y
CONFIG_PRINTK=y
diff --git a/recipes-kernel/linux/files/npcm7xx.cfg b/recipes-kernel/linux/files/npcm7xx.cfg
index 0cc5d6f..72e6f9d 100644
--- a/recipes-kernel/linux/files/npcm7xx.cfg
+++ b/recipes-kernel/linux/files/npcm7xx.cfg
@@ -10,6 +10,9 @@
CONFIG_KUSER_HELPERS=y
CONFIG_ARM_PATCH_IDIV=y
CONFIG_CPU_SW_DOMAIN_PAN=y
+CONFIG_HARDEN_BRANCH_HISTORY=y >=5.17-rc0
+CONFIG_DEBUG_ALIGN_RODATA=y
+CONFIG_STACKPROTECTOR_PER_TASK=y >=5.18-rc0
CONFIG_SERIAL_8250=y
CONFIG_SERIAL_8250_CONSOLE=y
CONFIG_SERIAL_OF_PLATFORM=y
