Skip to content

Commit

Permalink
fix some kernel 6.12 related kconfig warnings
Browse files Browse the repository at this point in the history
  • Loading branch information
jens-maus committed Jan 9, 2025
1 parent d72fdc5 commit e42a7c1
Show file tree
Hide file tree
Showing 3 changed files with 4 additions and 6 deletions.
2 changes: 1 addition & 1 deletion buildroot-external/kernel/6.12/global.config
Original file line number Diff line number Diff line change
Expand Up @@ -105,6 +105,7 @@ CONFIG_IKCONFIG_PROC=y
# enable zram and disable zswap because we
# don't have any swap device/file
CONFIG_ZRAM=y
CONFIG_ZRAM_BACKEND_LZ4=y
CONFIG_ZRAM_DEF_COMP_LZ4=y
# CONFIG_ZSWAP is not set
# CONFIG_Z3FOLD is not set
Expand All @@ -130,7 +131,6 @@ CONFIG_F2FS_FS_XATTR=y
CONFIG_F2FS_FS_POSIX_ACL=y
CONFIG_F2FS_IOSTAT=y
CONFIG_NTFS_FS=y
CONFIG_NTFS_RW=y
CONFIG_SQUASHFS=m
CONFIG_SQUASHFS_XATTR=y
CONFIG_SQUASHFS_LZ4=y
Expand Down
5 changes: 2 additions & 3 deletions buildroot-external/kernel/6.12/security-x86_64.config
Original file line number Diff line number Diff line change
Expand Up @@ -18,14 +18,13 @@ CONFIG_RANDOMIZE_MEMORY=y
CONFIG_LEGACY_VSYSCALL_NONE=y

# Enable Kernel Page Table Isolation to remove an entire class of cache timing side-channels.
CONFIG_PAGE_TABLE_ISOLATION=y
CONFIG_MITIGATION_PAGE_TABLE_ISOLATION=y

# Enable chip-specific IOMMU support.
CONFIG_INTEL_IOMMU=y
CONFIG_INTEL_IOMMU_DEFAULT_ON=y
CONFIG_INTEL_IOMMU_SVM=y
CONFIG_AMD_IOMMU=y
CONFIG_AMD_IOMMU_V2=y

# Straight-Line-Speculation
CONFIG_SLS=y
CONFIG_MITIGATION_SLS=y
3 changes: 1 addition & 2 deletions buildroot-external/kernel/6.12/security.config
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ CONFIG_MODULE_SIG_FORCE=y
CONFIG_MODULE_SIG_ALL=y
CONFIG_MODULE_SIG_SHA512=y
CONFIG_MODULE_SIG_HASH="sha512"
CONFIG_MODULE_COMPRESS_NONE=y
# CONFIG_MODULE_COMPRESS is not set

# Make sure kernel page tables have safe permissions.
CONFIG_STRICT_KERNEL_RWX=y
Expand Down Expand Up @@ -102,7 +102,6 @@ CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_UBSAN=y
CONFIG_UBSAN_TRAP=y
CONFIG_UBSAN_BOUNDS=y
CONFIG_UBSAN_SANITIZE_ALL=y
# CONFIG_UBSAN_SHIFT is not set
# CONFIG_UBSAN_DIV_ZERO is not set
# CONFIG_UBSAN_UNREACHABLE is not set
Expand Down

0 comments on commit e42a7c1

Please sign in to comment.