Merge tag 'nfsd-4.13' of git://linux-nfs.org/~bfields/linux

[karo-tx-linux.git] / security / Kconfig

diff --git a/security/Kconfig b/security/Kconfig
index d540bfe7319035e9ae6de6dd63e3f404530efb6e..e8e449444e658be4a9190c6ea2de14cca8fc4890 100644 (file)
--- a/security/Kconfig
+++ b/security/Kconfig
@@ -163,6 +163,13 @@ config HARDENED_USERCOPY_PAGESPAN
          been removed. This config is intended to be used only while
          trying to find such users.
 
+config FORTIFY_SOURCE
+       bool "Harden common str/mem functions against buffer overflows"
+       depends on ARCH_HAS_FORTIFY_SOURCE
+       help
+         Detect overflows of buffers in common string and memory functions
+         where the compiler can determine and validate the buffer sizes.
+
 config STATIC_USERMODEHELPER
        bool "Force all usermode helper calls through a single binary"
        help