hardening: Enable KFENCE in the hardening config

[linux-2.6-microblaze.git] / kernel / configs / hardening.config

diff --git a/kernel/configs/hardening.config b/kernel/configs/hardening.config
index ed126d7..7a5bbfc 100644 (file)
--- a/kernel/configs/hardening.config
+++ b/kernel/configs/hardening.config
@@ -45,6 +45,9 @@ CONFIG_UBSAN_BOUNDS=y
 # CONFIG_UBSAN_ENUM
 # CONFIG_UBSAN_ALIGNMENT
 
+# Sampling-based heap out-of-bounds and use-after-free detection.
+CONFIG_KFENCE=y
+
 # Linked list integrity checking.
 CONFIG_LIST_HARDENED=y