--- zzzz-none-000/linux-5.15.111/arch/Kconfig 2023-05-11 14:00:40.000000000 +0000 +++ puma7-atom-6670-761/linux-5.15.111/arch/Kconfig 2024-02-07 10:22:26.000000000 +0000 @@ -198,7 +198,8 @@ bool config TRACE_IRQFLAGS_SUPPORT - bool + bool "IRQ-flags tracing support" + default n config TRACE_IRQFLAGS_NMI_SUPPORT bool @@ -591,6 +592,15 @@ about 20% of all kernel functions, which increases the kernel code size by about 2%. +config CC_STACKPROTECTOR_BUG_ON_FAIL + bool "Detection of stack-corruption will trigger BUG()" + default n + depends on STACKPROTECTOR + help + Detection of stack-corruption will trigger BUG(). + Depending on the implementation of BUG(), further info + (backtrace, registerdump, stacktrace) possible. + config ARCH_SUPPORTS_SHADOW_CALL_STACK bool help @@ -1295,6 +1305,15 @@ config ARCH_HAS_PARANOID_L1D_FLUSH bool +config REFCOUNT_FULL + bool "Perform full reference count validation at the expense of speed" + help + Enabling this switches the refcounting infrastructure from a fast + unchecked atomic_t implementation to a fully state checked + implementation, which can be (slightly) slower but provides protections + against various use-after-free conditions that can be used in + security flaw exploits. + source "kernel/gcov/Kconfig" source "scripts/gcc-plugins/Kconfig"