1
2
3
4
5
6
7
8
# Basic kernel hardening options (specific to arm)

# Make sure PXN/PAN emulation is enabled.
CONFIG_CPU_SW_DOMAIN_PAN=y

# Dangerous; old interfaces and needless additional attack surface.
# CONFIG_OABI_COMPAT is not set
你和我 十指緊扣 默寫前奏 可是那然後呢