grsecurity: enable PAX_INITIFY
Uses gcc plugin to detect more instances where memory used during init can be freed.
This commit is contained in:
parent
b412f7d4c3
commit
ca7cc96ee8
@ -22,6 +22,10 @@ PAX_PT_PAX_FLAGS y
|
|||||||
PAX_XATTR_PAX_FLAGS y
|
PAX_XATTR_PAX_FLAGS y
|
||||||
PAX_EI_PAX n
|
PAX_EI_PAX n
|
||||||
|
|
||||||
|
PAX_INITIFY y
|
||||||
|
# initify is a fairly recent feature, enable verbose mode to aid in debugging
|
||||||
|
PAX_INITIFY_VERBOSE y
|
||||||
|
|
||||||
# The bts instrumentation method is compatible with binary only modules.
|
# The bts instrumentation method is compatible with binary only modules.
|
||||||
#
|
#
|
||||||
# Note: if platform supports SMEP, we could do without this
|
# Note: if platform supports SMEP, we could do without this
|
||||||
|
Loading…
Reference in New Issue
Block a user