diff options
| author | Mel Gorman <mgorman@techsingularity.net> | 2025-01-23 22:11:13 +0000 |
|---|---|---|
| committer | Kees Cook <kees@kernel.org> | 2025-02-28 11:51:31 -0800 |
| commit | d2132f453e3308adc82ab7c101bd5220a9a34167 (patch) | |
| tree | 4971a7438d70cdff1ac07fec100879a45a28af89 /mm/usercopy.c | |
| parent | f4d4e8b9d6afe880a855e919c4ba4139455e11db (diff) | |
mm: security: Allow default HARDENED_USERCOPY to be set at compile time
HARDENED_USERCOPY defaults to on if enabled at compile time. Allow
hardened_usercopy= default to be set at compile time similar to
init_on_alloc= and init_on_free=. The intent is that hardening
options that can be disabled at runtime can set their default at
build time.
Signed-off-by: Mel Gorman <mgorman@techsingularity.net>
Link: https://lore.kernel.org/r/20250123221115.19722-3-mgorman@techsingularity.net
Signed-off-by: Kees Cook <kees@kernel.org>
Diffstat (limited to 'mm/usercopy.c')
| -rw-r--r-- | mm/usercopy.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/mm/usercopy.c b/mm/usercopy.c index 16d63bd010af..e65a612ce8e8 100644 --- a/mm/usercopy.c +++ b/mm/usercopy.c @@ -255,7 +255,8 @@ void __check_object_size(const void *ptr, unsigned long n, bool to_user) } EXPORT_SYMBOL(__check_object_size); -static bool enable_checks __initdata = true; +static bool enable_checks __initdata = + IS_ENABLED(CONFIG_HARDENED_USERCOPY_DEFAULT_ON); static int __init parse_hardened_usercopy(char *str) { |