patrick/zephyr
1
0
Fork 0
Code Issues Pull requests Actions 7 Packages Projects Releases Wiki Activity

security: hardening: Organize hardened file

Browse source 
Separate debug and experimental options in hardened.csv
file for easier maintenance.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
This commit is contained in:
Flavio Ceolin 2023-05-08 13:55:16 -07:00 committed by Stephanos Ioannidis
parent 2ed97bc911
commit a06083c3c4
1 changed files with 28 additions and 22 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

50
scripts/kconfig/hardened.csv
View file

@ -1,6 +1,5 @@
HW_STACK_PROTECTION,y HW_STACK_PROTECTION,y
INIT_STACKS,n INIT_STACKS,n
KERNEL_DEBUG,n
BOOT_BANNER,n BOOT_BANNER,n
BOOT_DELAY,0 BOOT_DELAY,0
THREAD_MONITOR,n THREAD_MONITOR,n
@ -9,19 +8,9 @@ STACK_CANARIES,y
EXECUTE_XOR_WRITE,y EXECUTE_XOR_WRITE,y
STACK_POINTER_RANDOM,100 STACK_POINTER_RANDOM,100
BOUNDS_CHECK_BYPASS_MITIGATION,y BOUNDS_CHECK_BYPASS_MITIGATION,y
PERFORMANCE_METRICS,n
STATS,n STATS,n
DEBUG,n
TRACING,n TRACING,n
STACK_USAGE,n
PRINTK,n
EARLY_CONSOLE,n
ASSERT,n
OVERRIDE_FRAME_POINTER_DEFAULT,y OVERRIDE_FRAME_POINTER_DEFAULT,y
DEBUG_INFO,n
DEBUG_THREAD_INFO,n
TRACING_CTF,n
USE_SEGGER_RTT,n
LOG,n LOG,n
SHELL,n SHELL,n
TEST_RANDOM_GENERATOR,n TEST_RANDOM_GENERATOR,n
@ -35,19 +24,10 @@ BUILD_OUTPUT_STRIPPED,y
SOC_ATMEL_SAME70_DISABLE_ERASE_PIN,y SOC_ATMEL_SAME70_DISABLE_ERASE_PIN,y
SOC_ATMEL_SAME70_WAIT_MODE,n SOC_ATMEL_SAME70_WAIT_MODE,n
FAULT_DUMP,0 FAULT_DUMP,0
EXCEPTION_DEBUG,n
X86_MMU,y X86_MMU,y
BUILTIN_STACK_GUARD,y BUILTIN_STACK_GUARD,y
MPU_STACK_GUARD,y MPU_STACK_GUARD,y
STACK_SENTINEL,y STACK_SENTINEL,y
BOOT_TIME_MEASUREMENT,n,experimental
BT_A2DP,n,experimental
BT_AVDTP,n,experimental
BT_BREDR,n,experimental
BT_H5,n,experimental,
BT_HFP_HF,n,experimental
BT_RFCOMM,n,experimental
BT_DEBUG_SMP,n
BT_OOB_DATA_FIXED,n BT_OOB_DATA_FIXED,n
BT_FIXED_PASSKEY,n BT_FIXED_PASSKEY,n
BT_DEBUG_KEYS,n BT_DEBUG_KEYS,n
@ -55,8 +35,21 @@ BT_LOG_SNIFFER_INFO,n
BT_USE_DEBUG_KEYS,n BT_USE_DEBUG_KEYS,n
BT_STORE_DEBUG_KEYS,n BT_STORE_DEBUG_KEYS,n
BT_CONN_DISABLE_SECURITY,n BT_CONN_DISABLE_SECURITY,n
CAN_NET,n,experimental MCUMGR_CMD_FS_MGMT,n
TRACING_CTF,n
USE_SEGGER_RTT,n
# Experimental options
BOOT_TIME_MEASUREMENT,n,experimental
BT_A2DP,n,experimental
BT_AVDTP,n,experimental
BT_BREDR,n,experimental
BT_H5,n,experimental,
BT_HFP_HF,n,experimental
BT_RFCOMM,n,experimental
CONSOLE_SUBSYS,n,experimental CONSOLE_SUBSYS,n,experimental
CAN_NET,n,experimental
CRYPTO,n,experimental CRYPTO,n,experimental
CRYPTO_MBEDTLS_SHIM,n,experimental CRYPTO_MBEDTLS_SHIM,n,experimental
CRYPTO_TINYCRYPT_SHIM,n,experimental CRYPTO_TINYCRYPT_SHIM,n,experimental
@ -82,4 +75,17 @@ SPI_SLAVE,n,experimental
THREAD_MONITOR,n,experimental THREAD_MONITOR,n,experimental
THREAD_NAME,n,experimental THREAD_NAME,n,experimental
UART_ASYNC_API,n,experimental UART_ASYNC_API,n,experimental
MCUMGR_CMD_FS_MGMT,n
# Debug options
PRINTK,n
EARLY_CONSOLE,n
DEBUG,n
ASSERT,n
EXCEPTION_DEBUG,n
STACK_USAGE,n
KERNEL_DEBUG,n
PERFORMANCE_METRICS,n
DEBUG_INFO,n
DEBUG_THREAD_INFO,n
BT_DEBUG_SMP,n

Can't render this file because it has a wrong number of fields in line 43.