Need activate more hardening option

[FR. Loïc]

Hi,

The current configuration of the linux kernel in Ubuntu is not secure enough.
A simple test [1] of kernel in Ubuntu Disco clearly indicates 53 errors...

Can we discuss possible options to activate by default?

Enable the GCC_PLUGINS* would be for me the bare minimum.

Thanks. Best regards,

[1] https://github.com/a13xp0p0v/kconfig-hardened-check

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

This bug is missing log files that will aid in diagnosing the problem. While running an Ubuntu kernel (not a mainline or third-party kernel) please enter the following command in a terminal window:

apport-collect 1805018

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

[FR. Loïc (hackurx)]

No log files is required.

[FR. Loïc (hackurx)]

Current kernel configuration

[FR. Loïc (hackurx)]

config-5.0.0-16-generic: 'OK' - 43 / 'FAIL' - 60

[FR. Loïc (hackurx)]

Ubuntu 20.04 LTS (Focal Fossa) :
config check is finished: 'OK' - 57 / 'FAIL' - 79

https://github.com/a13xp0p0v/kconfig-hardened-check/commit/e54cb30a2789c8f8ce15648d72299e243b3b27c1

[FR. Loïc (hackurx)]

To be read!
https://blog.herecura.eu/blog/2020-05-30-kconfig-hardening-tests/