commit 375c1b660a98a3f75662c682adb263713eb04dc2
author Greg Hackmann <ghackmann@google.com> Thu Mar 29 10:24:57 2018 -0700
committer Greg Hackmann <ghackmann@google.com> Thu Mar 29 10:40:57 2018 -0700
tree b0e4e82205519b1d7429b7b9fa7b14befa4237bd
parent c248a95d1c525d5f28704f7cd9c3637b08d9ad0f

android-4.14: replace CONFIG_DEBUG_RODATA with CONFIG_STRICT_KERNEL_RWX

This was renamed in 4.10 by 0f5bf6d0afe4 ("arch: Rename
CONFIG_DEBUG_RODATA and CONFIG_DEBUG_MODULE_RONX") in order to clarify
the option's importance.

Bug: 76186455
Test: grep -E STRICT_KERNEL_RWX -A 3 \
	android-4.14/Documentation/security/self-protection.rst
Change-Id: I6cc3356849c098c5f4c63a6d144440d6fee3c346
Signed-off-by: Greg Hackmann <ghackmann@google.com>

android-4.14/android-recommended.cfg

diff --git a/android-4.14/android-recommended.cfg b/android-4.14/android-recommended.cfg
index a176437..6e80261 100644
--- a/android-4.14/android-recommended.cfg
+++ b/android-4.14/android-recommended.cfg
@@ -14,7 +14,6 @@
 CONFIG_CC_STACKPROTECTOR_STRONG=y
 CONFIG_COMPACTION=y
 CONFIG_CPU_SW_DOMAIN_PAN=y
-CONFIG_DEBUG_RODATA=y
 CONFIG_DM_CRYPT=y
 CONFIG_DM_UEVENT=y
 CONFIG_DM_VERITY=y
@@ -115,6 +114,7 @@
 CONFIG_SMARTJOYPLUS_FF=y
 CONFIG_SND=y
 CONFIG_SOUND=y
+CONFIG_STRICT_KERNEL_RWX=y
 CONFIG_TABLET_USB_ACECAD=y
 CONFIG_TABLET_USB_AIPTEK=y
 CONFIG_TABLET_USB_GTCO=y