Google Git
Sign in
android / kernel / msm / refs/tags/android-s-v2-beta-1_r0.3
tagd5b9400fd69c3660bf4302f0764753d54ae3542c
taggerThe Android Open Source Project <initial-contribution@android.com>Wed Dec 08 13:51:22 2021 -0800
objectaa605cad91030aae29628b900537904650739e34 
Android s v2 beta 1 release 0.3
commitaa605cad91030aae29628b900537904650739e34[log] [tgz]
authorRoger Liao <rogerliao@google.com>Wed Sep 22 11:12:18 2021 +0800
committerRoger Liao <rogerliao@google.com>Mon Nov 01 08:08:25 2021 +0000
tree8d66316dcfead1dfadafde9186a6aaa0838fd098
parent5f87862e1b6c28b2f5167e8a08d925ccf5cfe57d [diff]
arm64: configs: Disable CONFIG_SECURITY_SMACK and CONFIG_MODULE_FORCE_UNLOAD

Security hardening:
1. unset CONFIG_SECURITY_SMACK which implicitly enable CONFIG_NETLABEL
2. unset CONFIG_MODULE_FORCE_UNLOAD to prevent UAF
3. set CONFIG_SECURITY_NETWORK which CONFIG_SECURITY_SELINUX depends on

Bug: 198690429

Signed-off-by: Roger Liao <rogerliao@google.com>
Change-Id: Iae7ac76d863bca8337ac8d0c608c5a1418c690a4
2 files changed
tree: 8d66316dcfead1dfadafde9186a6aaa0838fd098
  1. arch/
  2. block/
  3. certs/
  4. crypto/
  5. Documentation/
  6. drivers/
  7. firmware/
  8. fs/
  9. include/
  10. init/
  11. ipc/
  12. kernel/
  13. lib/
  14. mm/
  15. net/
  16. samples/
  17. scripts/
  18. security/
  19. sound/
  20. techpack/
  21. test/
  22. tools/
  23. usr/
  24. virt/
  25. .clang-format
  26. .cocciconfig
  27. .get_maintainer.ignore
  28. .gitattributes
  29. .gitignore
  30. .mailmap
  31. Androidbp
  32. AndroidKernel.mk
  33. build.config
  34. build.config.aarch64
  35. build.config.boundsan
  36. build.config.common
  37. build.config.common.clang
  38. build.config.cuttlefish.aarch64
  39. build.config.cuttlefish.x86_64
  40. build.config.debug_api
  41. build.config.debug_hang
  42. build.config.debug_locking
  43. build.config.debug_memory
  44. build.config.floral
  45. build.config.floral.common
  46. build.config.floral.common.clang
  47. build.config.floral_debug_api
  48. build.config.floral_debug_hang
  49. build.config.floral_debug_locking
  50. build.config.floral_debug_memory
  51. build.config.floral_debug_memory_accounting
  52. build.config.floral_kasan
  53. build.config.floral_khwasan
  54. build.config.floral_no-cfi
  55. build.config.floral_performance
  56. build.config.gcc
  57. build.config.kasan
  58. build.config.khwasan
  59. build.config.no-cfi
  60. build.config.performance
  61. build.config.sunfish
  62. build.config.sunfish.common
  63. build.config.sunfish.common.clang
  64. build.config.sunfish_debug_api
  65. build.config.sunfish_debug_hang
  66. build.config.sunfish_debug_locking
  67. build.config.sunfish_debug_memory
  68. build.config.sunfish_debug_memory_accounting
  69. build.config.sunfish_kasan
  70. build.config.sunfish_khwasan
  71. build.config.sunfish_no-cfi
  72. build.config.sunfish_performance
  73. build_floral.sh
  74. build_sunfish.sh
  75. COPYING
  76. CREDITS
  77. disable_dbgfs.sh
  78. gen_headers_arm.bp
  79. gen_headers_arm64.bp
  80. Kbuild
  81. Kconfig
  82. kernel_headers.py
  83. MAINTAINERS
  84. Makefile
  85. PREUPLOAD.cfg
  86. README
  87. verity_dev_keys.x509