diff options
Diffstat (limited to 'security/Kconfig')
| -rw-r--r-- | security/Kconfig | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/security/Kconfig b/security/Kconfig index 93027fdf47d1..d540bfe73190 100644 --- a/security/Kconfig +++ b/security/Kconfig | |||
| @@ -54,6 +54,15 @@ config SECURITY_NETWORK | |||
| 54 | implement socket and networking access controls. | 54 | implement socket and networking access controls. |
| 55 | If you are unsure how to answer this question, answer N. | 55 | If you are unsure how to answer this question, answer N. |
| 56 | 56 | ||
| 57 | config SECURITY_INFINIBAND | ||
| 58 | bool "Infiniband Security Hooks" | ||
| 59 | depends on SECURITY && INFINIBAND | ||
| 60 | help | ||
| 61 | This enables the Infiniband security hooks. | ||
| 62 | If enabled, a security module can use these hooks to | ||
| 63 | implement Infiniband access controls. | ||
| 64 | If you are unsure how to answer this question, answer N. | ||
| 65 | |||
| 57 | config SECURITY_NETWORK_XFRM | 66 | config SECURITY_NETWORK_XFRM |
| 58 | bool "XFRM (IPSec) Networking Security Hooks" | 67 | bool "XFRM (IPSec) Networking Security Hooks" |
| 59 | depends on XFRM && SECURITY_NETWORK | 68 | depends on XFRM && SECURITY_NETWORK |
| @@ -139,7 +148,7 @@ config HARDENED_USERCOPY | |||
| 139 | copying memory to/from the kernel (via copy_to_user() and | 148 | copying memory to/from the kernel (via copy_to_user() and |
| 140 | copy_from_user() functions) by rejecting memory ranges that | 149 | copy_from_user() functions) by rejecting memory ranges that |
| 141 | are larger than the specified heap object, span multiple | 150 | are larger than the specified heap object, span multiple |
| 142 | separately allocates pages, are not on the process stack, | 151 | separately allocated pages, are not on the process stack, |
| 143 | or are part of the kernel text. This kills entire classes | 152 | or are part of the kernel text. This kills entire classes |
| 144 | of heap overflow exploits and similar kernel memory exposures. | 153 | of heap overflow exploits and similar kernel memory exposures. |
| 145 | 154 | ||
