Piecuu/pmaports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

kconfigcheck: enable SECURITY_DMESG_RESTRICT

Browse source 
Kernel logs can contain sensitive information which we don't want
easily accessible. This locks the kernel buffer to privileged
access (with sudo).

Signed-off-by: Aster Boese <asterboese@mailbox.org>
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8342>
This commit is contained in:
Aster Boese 2026-04-12 22:28:28 +02:00 • committed by The Friendly Meow (merge) Bot
parent 49f331f411
commit b5c5a91b60
No known key found for this signature in database
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
kconfigcheck.toml
View file

@ -638,6 +638,9 @@ EFIVAR_FS = "m"
["category:immutable".">=0.0.0"."all"]
DM_VERITY = "m"
["category:hardening".">=0.0.0"."all"]
SECURITY_DMESG_RESTRICT = "y"
# In 6.18+, CFI_CLANG is CFI
["category:hardening".">=6.18_rc1"."x86_64 aarch64 armv7 riscv64"]
CFI = "y"