DivestOS/Patches/OLD/Defconfig_Hardening.patch
2016-12-21 19:30:02 -05:00

34 lines
1.1 KiB
Diff

From 1e69f23b5f6f31406240bf61d66db3ac6a19484f Mon Sep 17 00:00:00 2001
From: Tad <tad@spotco.us>
Date: Wed, 11 Nov 2015 21:01:29 -0500
Subject: [PATCH] Harden misc options
Change-Id: I4c82dffb19a5448b01df9942e59642ce96cf8416
---
arch/arm/configs/cyanogenmod_bacon_defconfig | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/arch/arm/configs/cyanogenmod_bacon_defconfig b/arch/arm/configs/cyanogenmod_bacon_defconfig
index 19cbbdb..16ffbdd 100644
--- a/arch/arm/configs/cyanogenmod_bacon_defconfig
+++ b/arch/arm/configs/cyanogenmod_bacon_defconfig
@@ -3431,13 +3431,13 @@ CONFIG_ARM_UNWIND=y
CONFIG_KEYS=y
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEYS_DEBUG_PROC_KEYS is not set
-# CONFIG_SECURITY_DMESG_RESTRICT is not set
+CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY=y
# CONFIG_SECURITYFS is not set
CONFIG_SECURITY_NETWORK=y
# CONFIG_SECURITY_NETWORK_XFRM is not set
# CONFIG_SECURITY_PATH is not set
-CONFIG_LSM_MMAP_MIN_ADDR=4096
+CONFIG_LSM_MMAP_MIN_ADDR=32768
CONFIG_SECURITY_SELINUX=y
# CONFIG_SECURITY_SELINUX_BOOTPARAM is not set
# CONFIG_SECURITY_SELINUX_DISABLE is not set
--
2.6.2