feat: disallow userspace root from modifying kernel code

cartesi · Nov 17, 2023 · e89c250 · e89c250
1 parent d876c80
commit e89c250
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/configs/default-linux-config b/configs/default-linux-config
@@ -98,3 +98,5 @@ CONFIG_VIRTUALIZATION=y
 CONFIG_KVM=y
 # CONFIG_COMPAT is not set
 # CONFIG_SUSPEND is not set
+CONFIG_STRICT_DEVMEM=y
+CONFIG_IO_STRICT_DEVMEM=y