aboutsummaryrefslogtreecommitdiffstats
path: root/security/Kconfig
diff options
context:
space:
mode:
Diffstat (limited to 'security/Kconfig')
-rw-r--r--security/Kconfig11
1 files changed, 10 insertions, 1 deletions
diff --git a/security/Kconfig b/security/Kconfig
index 93027fdf47d1..d540bfe73190 100644
--- a/security/Kconfig
+++ b/security/Kconfig
@@ -54,6 +54,15 @@ config SECURITY_NETWORK
54 implement socket and networking access controls. 54 implement socket and networking access controls.
55 If you are unsure how to answer this question, answer N. 55 If you are unsure how to answer this question, answer N.
56 56
57config SECURITY_INFINIBAND
58 bool "Infiniband Security Hooks"
59 depends on SECURITY && INFINIBAND
60 help
61 This enables the Infiniband security hooks.
62 If enabled, a security module can use these hooks to
63 implement Infiniband access controls.
64 If you are unsure how to answer this question, answer N.
65
57config SECURITY_NETWORK_XFRM 66config SECURITY_NETWORK_XFRM
58 bool "XFRM (IPSec) Networking Security Hooks" 67 bool "XFRM (IPSec) Networking Security Hooks"
59 depends on XFRM && SECURITY_NETWORK 68 depends on XFRM && SECURITY_NETWORK
@@ -139,7 +148,7 @@ config HARDENED_USERCOPY
139 copying memory to/from the kernel (via copy_to_user() and 148 copying memory to/from the kernel (via copy_to_user() and
140 copy_from_user() functions) by rejecting memory ranges that 149 copy_from_user() functions) by rejecting memory ranges that
141 are larger than the specified heap object, span multiple 150 are larger than the specified heap object, span multiple
142 separately allocates pages, are not on the process stack, 151 separately allocated pages, are not on the process stack,
143 or are part of the kernel text. This kills entire classes 152 or are part of the kernel text. This kills entire classes
144 of heap overflow exploits and similar kernel memory exposures. 153 of heap overflow exploits and similar kernel memory exposures.
145 154