diff -drupN a/security/Kconfig b/security/Kconfig --- a/security/Kconfig 2018-08-06 17:23:04.000000000 +0300 +++ b/security/Kconfig 2022-06-12 05:28:14.000000000 +0300 @@ -18,6 +18,15 @@ config SECURITY_DMESG_RESTRICT If you are unsure how to answer this question, answer N. +config SECURITY_PERF_EVENTS_RESTRICT + bool "Restrict unprivileged use of performance events" + depends on PERF_EVENTS + help + If you say Y here, the kernel.perf_event_paranoid sysctl + will be set to 3 by default, and no unprivileged use of the + perf_event_open syscall will be permitted unless it is + changed. + config SECURITY bool "Enable different security models" depends on SYSFS @@ -168,6 +177,13 @@ config HARDENED_USERCOPY_PAGESPAN been removed. This config is intended to be used only while trying to find such users. +config FILE_INTEGRITY + depends on SECURITYFS + tristate "Enable System File Verify Module" + default n + help + Sunxi file integrity verify module for android system + source security/selinux/Kconfig source security/smack/Kconfig source security/tomoyo/Kconfig