From dbbb6b841fd0c48e10442196e4d0e72046a529f7 Mon Sep 17 00:00:00 2001
From: Shawn Webb <shawn@opnsense.org>
Date: Sat, 11 Feb 2017 17:51:05 -0500
Subject: [PATCH] Add sample HARDENED amd64 kernel config.

Signed-off-by:	Shawn Webb <shawn@opnsense.org>
---
 sys/amd64/conf/HARDENED | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 sys/amd64/conf/HARDENED

diff --git a/sys/amd64/conf/HARDENED b/sys/amd64/conf/HARDENED
new file mode 100644
index 00000000000..8a704edee63
--- /dev/null
+++ b/sys/amd64/conf/HARDENED
@@ -0,0 +1,10 @@
+include GENERIC
+
+options		PAX
+options		PAX_ASLR
+options		PAX_HARDENING
+options		PAX_SYSCTLS
+options		PAX_SEGVGUARD
+options		HBSD_DEBUG
+
+options		EARLY_AP_STARTUP