CONFIG_DEBUG_ALIGN_RODATA: Make rodata strictly non-executable

General informations

The Linux kernel configuration item CONFIG_DEBUG_ALIGN_RODATA has multiple definitions:

Make rodata strictly non-executable found in arch/arm/mm/Kconfig

The configuration item CONFIG_DEBUG_ALIGN_RODATA:

• prompt: Make rodata strictly non-executable
• type: bool
• depends on: CONFIG_STRICT_KERNEL_RWX
• defined in arch/arm/mm/Kconfig
• found in Linux kernels: 4.6–4.20, 5.0–5.19, 6.0–6.12, 6.13-rc+HEAD

Help text

If this is set, rodata will be made explicitly non-executable. This provides protection on the rare chance that attackers might find and use ROP gadgets that exist in the rodata section. This adds an additional section-aligned split of rodata from kernel text so it can be made explicitly non-executable. This padding may waste memory space to gain the additional protection.

Align linker sections up to SECTION_SIZE found in arch/arm64/Kconfig.debug

The configuration item CONFIG_DEBUG_ALIGN_RODATA:

• prompt: Align linker sections up to SECTION_SIZE
• type: bool
• depends on: CONFIG_STRICT_KERNEL_RWX
• defined in arch/arm64/Kconfig.debug
• found in Linux kernels: 4.0–4.20, 5.0–5.6

Help text

If this option is enabled, sections that may potentially be marked as read only or non-executable will be aligned up to the section size of the kernel. This prevents sections from being split into pages and avoids a potential TLB penalty. The downside is an increase in alignment and potentially wasted space. Turn on this option if performance is more important than memory pressure.

If in doubt, say N.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: