diff options
Diffstat (limited to 'meta-yerba/recipes-kernel/linux/files')
| -rw-r--r-- | meta-yerba/recipes-kernel/linux/files/defconfig | 68 |
1 files changed, 26 insertions, 42 deletions
diff --git a/meta-yerba/recipes-kernel/linux/files/defconfig b/meta-yerba/recipes-kernel/linux/files/defconfig index 06b84fc..0f82806 100644 --- a/meta-yerba/recipes-kernel/linux/files/defconfig +++ b/meta-yerba/recipes-kernel/linux/files/defconfig @@ -1,8 +1,3 @@ -# -# Automatically generated file; DO NOT EDIT. -# Linux/x86 7.0.7 Kernel Configuration -# -CONFIG_CC_VERSION_TEXT="x86_64-pc-linux-gnu-gcc (Gentoo 15.2.1_p20260214 p5) 15.2.1 20260214" CONFIG_CC_IS_GCC=y CONFIG_GCC_VERSION=150201 CONFIG_CLANG_VERSION=0 @@ -40,7 +35,7 @@ CONFIG_THREAD_INFO_IN_TASK=y CONFIG_INIT_ENV_ARG_LIMIT=32 # CONFIG_COMPILE_TEST is not set # CONFIG_WERROR is not set -CONFIG_LOCALVERSION="-yerba-vanilla" +CONFIG_LOCALVERSION="-yerba-hardened" # CONFIG_LOCALVERSION_AUTO is not set CONFIG_BUILD_SALT="" CONFIG_HAVE_KERNEL_GZIP=y @@ -51,12 +46,12 @@ CONFIG_HAVE_KERNEL_LZO=y CONFIG_HAVE_KERNEL_LZ4=y CONFIG_HAVE_KERNEL_ZSTD=y CONFIG_KERNEL_GZIP=y -# CONFIG_KERNEL_BZIP2 is not set -# CONFIG_KERNEL_LZMA is not set -# CONFIG_KERNEL_XZ is not set -# CONFIG_KERNEL_LZO is not set -# CONFIG_KERNEL_LZ4 is not set -# CONFIG_KERNEL_ZSTD is not set +CONFIG_KERNEL_BZIP2=y +CONFIG_KERNEL_LZMA=y +CONFIG_KERNEL_XZ=y +CONFIG_KERNEL_LZO=y +CONFIG_KERNEL_LZ4=y +CONFIG_KERNEL_ZSTD=y CONFIG_DEFAULT_INIT="" CONFIG_DEFAULT_HOSTNAME="yerba" CONFIG_SYSVIPC=y @@ -957,6 +952,7 @@ CONFIG_SECCOMP=y CONFIG_SECCOMP_FILTER=y # CONFIG_SECCOMP_CACHE_DEBUG is not set CONFIG_HAVE_ARCH_KSTACK_ERASE=y +CONFIG_KSTACK_ERASE=y CONFIG_HAVE_STACKPROTECTOR=y CONFIG_STACKPROTECTOR=y CONFIG_STACKPROTECTOR_STRONG=y @@ -2553,9 +2549,9 @@ CONFIG_EFI_RUNTIME_WRAPPERS=y CONFIG_EFI_TEST=m CONFIG_EFI_DEV_PATH_PARSER=y CONFIG_APPLE_PROPERTIES=y -# CONFIG_RESET_ATTACK_MITIGATION is not set +CONFIG_RESET_ATTACK_MITIGATION=y CONFIG_EFI_RCI2_TABLE=y -# CONFIG_EFI_DISABLE_PCI_DMA is not set +CONFIG_EFI_DISABLE_PCI_DMA=y CONFIG_EFI_EARLYCON=y CONFIG_EFI_CUSTOM_SSDT_OVERLAYS=y # CONFIG_EFI_DISABLE_RUNTIME is not set @@ -3171,7 +3167,7 @@ CONFIG_DM_DUST=m CONFIG_DM_INIT=y CONFIG_DM_UEVENT=y CONFIG_DM_FLAKEY=m -CONFIG_DM_VERITY=m +CONFIG_DM_VERITY=y CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG=y CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING=y CONFIG_DM_VERITY_FEC=y @@ -4579,7 +4575,7 @@ CONFIG_VT_HW_CONSOLE_BINDING=y CONFIG_UNIX98_PTYS=y # CONFIG_LEGACY_PTYS is not set # CONFIG_LEGACY_TIOCSTI is not set -CONFIG_LDISC_AUTOLOAD=y +# CONFIG_LDISC_AUTOLOAD is not set # # Serial drivers @@ -4678,7 +4674,7 @@ CONFIG_HW_RANDOM_VIA=m CONFIG_HW_RANDOM_VIRTIO=y CONFIG_HW_RANDOM_XIPHERA=m # CONFIG_APPLICOM is not set -CONFIG_DEVMEM=y +# CONFIG_DEVMEM is not set CONFIG_NVRAM=y CONFIG_DEVPORT=y CONFIG_HPET=y @@ -9677,7 +9673,7 @@ CONFIG_IOMMU_SUPPORT=y # end of Generic IOMMU Pagetable Support # CONFIG_IOMMU_DEBUGFS is not set -# CONFIG_IOMMU_DEFAULT_DMA_STRICT is not set +CONFIG_IOMMU_DEFAULT_DMA_STRICT=y CONFIG_IOMMU_DEFAULT_DMA_LAZY=y # CONFIG_IOMMU_DEFAULT_PASSTHROUGH is not set CONFIG_IOMMU_DMA=y @@ -10900,7 +10896,7 @@ CONFIG_NTFS3_FS_POSIX_ACL=y # Pseudo filesystems # CONFIG_PROC_FS=y -CONFIG_PROC_KCORE=y +# CONFIG_PROC_KCORE is not set CONFIG_PROC_VMCORE=y CONFIG_PROC_VMCORE_DEVICE_DUMP=y CONFIG_PROC_SYSCTL=y @@ -11274,7 +11270,7 @@ CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y # CONFIG_INIT_STACK_ALL_PATTERN is not set CONFIG_INIT_STACK_ALL_ZERO=y CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y -# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set +CONFIG_INIT_ON_FREE_DEFAULT_ON=y CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y # CONFIG_ZERO_CALL_USED_REGS is not set # end of Memory initialization @@ -11851,17 +11847,17 @@ CONFIG_KGDB_LOW_LEVEL_TRAP=y # CONFIG_KGDB_KDB is not set CONFIG_ARCH_HAS_EARLY_DEBUG=y CONFIG_ARCH_HAS_UBSAN=y -CONFIG_UBSAN=y -# CONFIG_UBSAN_TRAP is not set CONFIG_CC_HAS_UBSAN_BOUNDS_STRICT=y +CONFIG_UBSAN=y +CONFIG_UBSAN_TRAP=y CONFIG_UBSAN_BOUNDS=y -CONFIG_UBSAN_BOUNDS_STRICT=y -CONFIG_UBSAN_SHIFT=y +# CONFIG_UBSAN_SHIFT is not set # CONFIG_UBSAN_DIV_ZERO is not set +# CONFIG_UBSAN_UNREACHABLE is not set +# CONFIG_UBSAN_INTEGER_WRAP is not set # CONFIG_UBSAN_BOOL is not set # CONFIG_UBSAN_ENUM is not set # CONFIG_UBSAN_ALIGNMENT is not set -# CONFIG_TEST_UBSAN is not set CONFIG_HAVE_ARCH_KCSAN=y CONFIG_HAVE_KCSAN_COMPILER=y # CONFIG_KCSAN is not set @@ -11884,7 +11880,8 @@ CONFIG_PAGE_EXTENSION=y CONFIG_SLUB_DEBUG=y # CONFIG_SLUB_DEBUG_ON is not set CONFIG_PAGE_OWNER=y -# CONFIG_PAGE_TABLE_CHECK is not set +CONFIG_PAGE_TABLE_CHECK=y +CONFIG_PAGE_TABLE_CHECK_ENFORCED=y CONFIG_PAGE_POISONING=y # CONFIG_DEBUG_PAGE_REF is not set # CONFIG_DEBUG_RODATA_TEST is not set @@ -12288,20 +12285,7 @@ CONFIG_MEMTEST=y CONFIG_IO_URING_ZCRX=y CONFIG_IO_URING_BPF=y -# -# Gentoo Linux -# -CONFIG_GENTOO_LINUX=y -CONFIG_GENTOO_LINUX_UDEV=y -CONFIG_GENTOO_LINUX_PORTAGE=y - -# -# Support for init systems, system and service managers -# -CONFIG_GENTOO_LINUX_INIT_SCRIPT=y -# CONFIG_GENTOO_LINUX_INIT_SYSTEMD is not set -# end of Support for init systems, system and service managers +GCC_PLUGIN_STACKLEAK=y +GCC_PLUGIN_ARM_SSP_PER_TASK=y -# CONFIG_GENTOO_KERNEL_SELF_PROTECTION is not set -CONFIG_GENTOO_PRINT_FIRMWARE_INFO=y -# end of Gentoo Linux +CONFIG_KMALLOC_PARTITION_CACHES=y |