From 40b83a49b2bbbff63e1fd924113dc572e1deeec1 Mon Sep 17 00:00:00 2001
From: Satish Seelamsetti <sseelamsetti@nvidia.com>
Date: Mon, 9 Sep 2024 07:13:56 +0000
Subject: [PATCH] NVIDIA: SAUCE: arm64: configs: Enable CONFIG_IO_STRICT_DEVMEM

BugLink: https://bugs.launchpad.net/bugs/2080908

Enable CONFIG_IO_STRICT_DEVMEM in release builds for increasing security
by filtering I/O access to /dev/mem.

http://nvbugs/4781691

Signed-off-by: Satish Seelamsetti <sseelamsetti@nvidia.com>
Reviewed-by: Rajesh Gumasta <rgumasta@nvidia.com>
Tested-by: Rajesh Gumasta <rgumasta@nvidia.com>
Signed-off-by: Laxman Dewangan <ldewangan@nvidia.com>
Acked-by: Noah Wager <noah.wager@canonical.com>
Acked-by: Jacob Martin <jacob.martin@canonical.com>
Signed-off-by: Noah Wager <noah.wager@canonical.com>
---
 arch/arm64/configs/tegra_prod_defconfig | 1 +
 1 file changed, 1 insertion(+)

diff --git a/arch/arm64/configs/tegra_prod_defconfig b/arch/arm64/configs/tegra_prod_defconfig
index 2742f2a0bd46..98d3abf91ae4 100644
--- a/arch/arm64/configs/tegra_prod_defconfig
+++ b/arch/arm64/configs/tegra_prod_defconfig
@@ -1650,6 +1650,7 @@ CONFIG_DEBUG_INFO_REDUCED=y
 CONFIG_MAGIC_SYSRQ=y
 CONFIG_DEBUG_FS=y
 # CONFIG_SCHED_DEBUG is not set
+CONFIG_IO_STRICT_DEVMEM=y
 # CONFIG_DEBUG_PREEMPT is not set
 # CONFIG_FTRACE is not set
 CONFIG_CORESIGHT=m