security.config

 1# Help: Common security options for PowerPC builds
 2
 3# This is the equivalent of booting with lockdown=integrity
 4CONFIG_SECURITY=y
 5CONFIG_SECURITYFS=y
 6CONFIG_SECURITY_LOCKDOWN_LSM=y
 7CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
 8CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y
 9
10# These are some general, reasonably inexpensive hardening options
11CONFIG_HARDENED_USERCOPY=y
12CONFIG_FORTIFY_SOURCE=y
13CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
14
15# UBSAN bounds checking is very cheap and good for hardening
16CONFIG_UBSAN=y
17# CONFIG_UBSAN_MISC is not set