1419b0af8Sopenharmony_ci# SPDX-License-Identifier: GPL-2.0-or-later
2419b0af8Sopenharmony_ci# Copyright (c) 2023 Huawei Device Co., Ltd.
3419b0af8Sopenharmony_ci#
4419b0af8Sopenharmony_ci# Config for hide excutable memory address of process manager
5419b0af8Sopenharmony_ci#
6419b0af8Sopenharmony_ci
7419b0af8Sopenharmony_cimenu "Hide memory address manager"
8419b0af8Sopenharmony_ci
9419b0af8Sopenharmony_ciconfig MEMORY_SECURITY
10419b0af8Sopenharmony_ci	default n
11419b0af8Sopenharmony_ci	bool "Enable memory protection for render process"
12419b0af8Sopenharmony_ci	help
13419b0af8Sopenharmony_ci	  Enable this to enable following two options.
14419b0af8Sopenharmony_ci
15419b0af8Sopenharmony_ciconfig HIDE_MEM_ADDRESS
16419b0af8Sopenharmony_ci	default n
17419b0af8Sopenharmony_ci	bool "Hide excutable memory address in proc/[pid]/maps "
18419b0af8Sopenharmony_ci	depends on MEMORY_SECURITY
19419b0af8Sopenharmony_ci	help
20419b0af8Sopenharmony_ci	  Select show address about anonymous area of the process memory
21419b0af8Sopenharmony_ci	  with -rx- permissions or not.
22419b0af8Sopenharmony_ci
23419b0af8Sopenharmony_ciconfig JIT_MEM_CONTROL
24419b0af8Sopenharmony_ci	default n
25419b0af8Sopenharmony_ci	bool "Enable memory protection for Just-In-Time compiler's codespace"
26419b0af8Sopenharmony_ci	depends on MEMORY_SECURITY
27419b0af8Sopenharmony_ci	help
28419b0af8Sopenharmony_ci	  Restrict mmap and mprotect interface for process which use JIT compiler.
29419b0af8Sopenharmony_ciendmenu
30419b0af8Sopenharmony_ci# a blank line must be existed