aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorVenkatesh Yadav Abbarapu <venkatesh.abbarapu@amd.com>2023-08-31 08:46:58 +0530
committerMichal Simek <michal.simek@amd.com>2023-09-21 13:20:11 +0200
commite5e6b1ed6c11842fe51b59e9bd9f1cf55401ae4b (patch)
treebd6fe51e67196475318a273a89580764f74a0eca
parent8ae1fab6b14181f54a92ecf41caceaf5d8c31bdf (diff)
downloadu-boot-e5e6b1ed6c11842fe51b59e9bd9f1cf55401ae4b.zip
u-boot-e5e6b1ed6c11842fe51b59e9bd9f1cf55401ae4b.tar.gz
u-boot-e5e6b1ed6c11842fe51b59e9bd9f1cf55401ae4b.tar.bz2
arm64: versal-net: Enable the config CMD_KASLRSEED
Kernel Address Space Layout Randomization (KASLR) is a hardening feature that aims to make it more difficult to take advantage of known exploits in the kernel, by placing kernel data structures at a random address at each boot.The bootloader supports randomizing the virtual address at which the kernel image is loaded. The bootloader must provide entropy by passing a random u64 value in the /chosen/kaslr-seed device tree node. When we run "kaslrseed" command from U-Boot, the bootloader will genarate the kaslr-seed and update the /chosen/kaslr-seed DT property. Signed-off-by: Venkatesh Yadav Abbarapu <venkatesh.abbarapu@amd.com> Link: https://lore.kernel.org/r/20230831031658.2203-4-venkatesh.abbarapu@amd.com Signed-off-by: Michal Simek <michal.simek@amd.com>
-rw-r--r--configs/xilinx_versal_net_virt_defconfig1
1 files changed, 1 insertions, 0 deletions
diff --git a/configs/xilinx_versal_net_virt_defconfig b/configs/xilinx_versal_net_virt_defconfig
index 9208e28..62322af 100644
--- a/configs/xilinx_versal_net_virt_defconfig
+++ b/configs/xilinx_versal_net_virt_defconfig
@@ -50,6 +50,7 @@ CONFIG_CMD_CACHE=y
CONFIG_CMD_EFIDEBUG=y
CONFIG_CMD_TIME=y
CONFIG_CMD_RNG=y
+CONFIG_CMD_KASLRSEED=y
CONFIG_CMD_TIMER=y
CONFIG_CMD_SMC=y
CONFIG_CMD_TPM=y