From: Josh Poimboeuf <jpoimboe@xxxxxxxxxx>
redhat/configs: Enable CONFIG_X86_KERNEL_IBT for Fedora and ARK
Kernel IBT is a nice kernel hardening feature with virtually no
performance impact. Since commit 4fd5f70ce14d ("x86/Kconfig: Enable
kernel IBT by default"), its now enabled by default upstream. Enable it
in Fedora and ARK as well.
Signed-off-by: Josh Poimboeuf <jpoimboe@xxxxxxxxxx>
diff --git a/redhat/configs/common/generic/x86/CONFIG_X86_KERNEL_IBT b/redhat/configs/common/generic/x86/CONFIG_X86_KERNEL_IBT
index blahblah..blahblah 100644
--- a/redhat/configs/common/generic/x86/CONFIG_X86_KERNEL_IBT
+++ b/redhat/configs/common/generic/x86/CONFIG_X86_KERNEL_IBT
@@ -1 +1 @@
-# CONFIG_X86_KERNEL_IBT is not set
+CONFIG_X86_KERNEL_IBT=y
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2346
_______________________________________________
kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
