PCI: cpqphp: Convert timers to use timer_setup()

[mirror_ubuntu-bionic-kernel.git] / security / Kconfig

diff --git a/security/Kconfig b/security/Kconfig
index 93027fdf47d1c7b610a4c7e15996bc288ceaba48..e8e449444e658be4a9190c6ea2de14cca8fc4890 100644 (file)
--- a/security/Kconfig
+++ b/security/Kconfig
@@ -54,6 +54,15 @@ config SECURITY_NETWORK
          implement socket and networking access controls.
          If you are unsure how to answer this question, answer N.
 
+config SECURITY_INFINIBAND
+       bool "Infiniband Security Hooks"
+       depends on SECURITY && INFINIBAND
+       help
+         This enables the Infiniband security hooks.
+         If enabled, a security module can use these hooks to
+         implement Infiniband access controls.
+         If you are unsure how to answer this question, answer N.
+
 config SECURITY_NETWORK_XFRM
        bool "XFRM (IPSec) Networking Security Hooks"
        depends on XFRM && SECURITY_NETWORK
@@ -139,7 +148,7 @@ config HARDENED_USERCOPY
          copying memory to/from the kernel (via copy_to_user() and
          copy_from_user() functions) by rejecting memory ranges that
          are larger than the specified heap object, span multiple
-         separately allocates pages, are not on the process stack,
+         separately allocated pages, are not on the process stack,
          or are part of the kernel text. This kills entire classes
          of heap overflow exploits and similar kernel memory exposures.
 
@@ -154,6 +163,13 @@ config HARDENED_USERCOPY_PAGESPAN
          been removed. This config is intended to be used only while
          trying to find such users.
 
+config FORTIFY_SOURCE
+       bool "Harden common str/mem functions against buffer overflows"
+       depends on ARCH_HAS_FORTIFY_SOURCE
+       help
+         Detect overflows of buffers in common string and memory functions
+         where the compiler can determine and validate the buffer sizes.
+
 config STATIC_USERMODEHELPER
        bool "Force all usermode helper calls through a single binary"
        help