CONFIG_STRICT_KERNEL_RWX: Make kernel text and rodata read-only

General informations

The Linux kernel configuration item CONFIG_STRICT_KERNEL_RWX:

• prompt: Make kernel text and rodata read-only
• type: bool
• depends on: ( CONFIG_ARCH_OPTIONAL_KERNEL_RWX ) && ( CONFIG_ARCH_HAS_STRICT_KERNEL_RWX )
• defined in arch/Kconfig
• found in Linux kernels: 4.11–4.20, 5.0–5.19, 6.0–6.11, 6.12-rc+HEAD

Help text

If this is set, kernel text and rodata memory will be made read-only, and non-text memory will be made non-executable. This provides protection against certain security exploits (e.g. executing the heap or modifying text)

These features are considered standard security practice these days. You should say Y here in almost all cases.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: