aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorVenkatesh Yadav Abbarapu <venkatesh.abbarapu@amd.com>2023-08-31 08:56:12 +0530
committerMichal Simek <michal.simek@amd.com>2023-09-21 13:20:11 +0200
commitc5d15db173ccbaa72b0b75d4a5afb784a99d4504 (patch)
treec495edd2db42344ed126b38b7cfe496438bef439
parentb57fed046e543b8fbc101c2c51786f4ce7dcac25 (diff)
downloadu-boot-c5d15db173ccbaa72b0b75d4a5afb784a99d4504.zip
u-boot-c5d15db173ccbaa72b0b75d4a5afb784a99d4504.tar.gz
u-boot-c5d15db173ccbaa72b0b75d4a5afb784a99d4504.tar.bz2
arm64: versal: Enable the config CMD_KASLRSEED
Kernel Address Space Layout Randomization (KASLR) is a hardening feature that aims to make it more difficult to take advantage of known exploits in the kernel, by placing kernel data structures at a random address at each boot.The bootloader supports randomizing the virtual address at which the kernel image is loaded. The bootloader must provide entropy by passing a random u64 value in the /chosen/kaslr-seed device tree node. When we run "kaslrseed" command from U-Boot, the bootloader will genarate the kaslr-seed and update the /chosen/kaslr-seed DT property. Signed-off-by: Venkatesh Yadav Abbarapu <venkatesh.abbarapu@amd.com> Link: https://lore.kernel.org/r/20230831032612.2729-4-venkatesh.abbarapu@amd.com Signed-off-by: Michal Simek <michal.simek@amd.com>
-rw-r--r--configs/xilinx_versal_virt_defconfig1
1 files changed, 1 insertions, 0 deletions
diff --git a/configs/xilinx_versal_virt_defconfig b/configs/xilinx_versal_virt_defconfig
index 5d5a23b..89566c7 100644
--- a/configs/xilinx_versal_virt_defconfig
+++ b/configs/xilinx_versal_virt_defconfig
@@ -51,6 +51,7 @@ CONFIG_CMD_CACHE=y
CONFIG_CMD_EFIDEBUG=y
CONFIG_CMD_TIME=y
CONFIG_CMD_RNG=y
+CONFIG_CMD_KASLRSEED=y
CONFIG_CMD_TIMER=y
CONFIG_CMD_SMC=y
CONFIG_CMD_TPM=y