This commit is contained in:
wanxiaoqing
2023-06-27 12:02:00 +08:00
19 changed files with 34 additions and 48 deletions
+25 -29
View File
@@ -15,42 +15,38 @@ Linux社区LTS 4.19.y分支信息请查看[kernel官网](https://git.kernel.org/
Linux社区LTS 5.10.y分支信息请查看[kernel官网](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/log/?h=linux-5.10.y)。
## 内核的Config组成模块<a name="section28381947133910"></a>
1. 通用配置文件
针对不同的内核版本,config将给出不同内核版本的对应不同的系统的参考通用配置文件,如下:
针对标准系统给出对应的参考通用配置文件:standard\_common\_defconfig
针对小型系统给出对应的参考通用配置文件:small\_common\_defconfig。
2. 开源开发板配置文件
针对于标准系统开源开发板Hi3516DV300,给出对应的配置文件。
## 目录<a name="section161941989596"></a>
针对标准系统开源开发板rk3568,给出对应的config分层配置目录结构、文件示例:
```
kernel/linux/config
├── linux-4.19
│   └── arch
│   └── arm
│   └── configs
│   ├── hi3516dv300_small_defconfig # 厂商Hisilicon对应的开源开发板Hi3516dv300小型系统的defconfig
│   ├── hi3516dv300_standard_defconfig # 厂商Hisilicon对应的开源开发板Hi3516dv300标准系统的defconfig
│   ├── small_common_defconfig # 小型系统的内核的common defconfig
│   └── standard_common_defconfig # 标准系统的内核的common defconfig
└── linux-5.10
── arch
└── arm
── configs
   ├── hi3516dv300_small_defconfig # 厂商Hisilicon对应的开源开发板Hi3516dv300小型系统的defconfig
   ├── hi3516dv300_standard_defconfig # 厂商Hisilicon对应的开源开发板Hi3516dv300标准系统的defconfig
   ├── small_common_defconfig # 小型系统的内核的common defconfig
   └── standard_common_defconfig # 标准系统的内核的common defconfig
── base_defconfig # 内核必选模块或安全红线特性配置
├── type # 形态配置目录
── small_defconfig # 小型系统常用配置文件
│ └── standard_defconfig # 标准系统常用配置文件
├── form # 版本配置目录
│ └── debug_defconfig # 调试版本配置文件(示例目前无配置需求)
├── rk3568 # 厂商平台配置目录
│ └── arch
│ └── arm64_defconfig # 芯片单板64位版本相关配置文件
└── product # 相关产品类型配置目录
└── phone_defconfig # 手机类型产品相关配置文件
```
## 内核的Config组成模块<a name="section28381947133910"></a>
1. 基础通用配置文件(base):其中包含OpenHarmony特性依赖的内核必选模块以及安全红线特性等必须开启的配置项,其中配置不可被覆盖。如需新增、调整其中配置需上内核-sig例会进行评审。默认必选配置文件。
2. 系统形态配置文件(type):针对不同的内核版本,config将给出不同内核版本的对应不同的系统的参考通用配置文件。必选配置文件,通过build\_type编译参数确定文件。
3. 版本形态配置文件(form):用于区分版本类型的可选配置文件,通过build\_variant编译参数确定文件,如果文件不存在,则忽略该层配置文件。
4. 芯片平台配置文件(chip):由具体厂商提供的和芯片、单板相关的内核模块、驱动等配置,为必选配置文件,通过target\_cpu编译参数确定文件。
5. 产品类型配置文件(product):如同一芯片平台同时又多种产品形态时候,需要做区分配置可以配置使用该层配置。为可选配置层,通过device\_type编译参数确定文件
## 使用说明<a name="section1393789267"></a>
1. 合入HDF补丁
@@ -3810,7 +3810,6 @@ CONFIG_KEYS=y
# CONFIG_PERSISTENT_KEYRINGS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
CONFIG_SECURITY=y
CONFIG_SECURITY_WRITABLE_HOOKS=y
# CONFIG_SECURITYFS is not set
@@ -3177,7 +3177,6 @@ CONFIG_KEYS=y
# CONFIG_PERSISTENT_KEYRINGS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
# CONFIG_SECURITY is not set
# CONFIG_SECURITYFS is not set
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
@@ -2950,7 +2950,6 @@ CONFIG_KEYS=y
# CONFIG_BIG_KEYS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
CONFIG_SECURITY=y
CONFIG_SECURITYFS=y
CONFIG_SECURITY_NETWORK=y
@@ -5936,7 +5936,6 @@ CONFIG_KEYS=y
# CONFIG_TRUSTED_KEYS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
# CONFIG_SECURITY is not set
CONFIG_SECURITYFS=y
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
@@ -2781,7 +2781,6 @@ CONFIG_KEYS=y
# CONFIG_BIG_KEYS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
# CONFIG_SECURITY is not set
# CONFIG_SECURITYFS is not set
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
@@ -2819,7 +2819,6 @@ CONFIG_KEYS=y
# CONFIG_BIG_KEYS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
CONFIG_SECURITY=y
CONFIG_SECURITYFS=y
CONFIG_SECURITY_NETWORK=y
@@ -6125,7 +6125,6 @@ CONFIG_KEYS=y
# CONFIG_TRUSTED_KEYS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
CONFIG_SECURITY=y
CONFIG_SECURITYFS=y
CONFIG_SECURITY_NETWORK=y
@@ -6199,7 +6199,6 @@ CONFIG_KEYS=y
# CONFIG_TRUSTED_KEYS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
CONFIG_SECURITY=y
CONFIG_SECURITYFS=y
CONFIG_SECURITY_NETWORK=y
@@ -6046,7 +6046,6 @@ CONFIG_KEYS=y
# CONFIG_BIG_KEYS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
CONFIG_SECURITY=y
CONFIG_SECURITYFS=y
CONFIG_SECURITY_NETWORK=y
@@ -4271,7 +4271,6 @@ CONFIG_KEYS=y
# CONFIG_PERSISTENT_KEYRINGS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
# CONFIG_SECURITY is not set
CONFIG_SECURITYFS=y
# CONFIG_INTEL_TXT is not set
+5 -2
View File
@@ -74,5 +74,8 @@ CONFIG_PROC_FS=y
CONFIG_SECURITY=y
# end of Security options
#
#Security DMESG restrict
#
CONFIG_SECURITY_DMESG_RESTRICT=y
# end of Security DMESG restrict
@@ -3161,7 +3161,6 @@ CONFIG_KEYS=y
# CONFIG_BIG_KEYS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
CONFIG_SECURITY=y
CONFIG_SECURITYFS=y
CONFIG_SECURITY_NETWORK=y
+1 -1
View File
@@ -1648,4 +1648,4 @@ CONFIG_DEBUG_INFO=y
# CONFIG_SCHED_DEBUG is not set
# CONFIG_DEBUG_PREEMPT is not set
# CONFIG_FTRACE is not set
CONFIG_MEMTEST=y
CONFIG_MEMTEST=y
-1
View File
@@ -5505,7 +5505,6 @@ CONFIG_IO_WQ=y
# CONFIG_TRUSTED_KEYS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
# CONFIG_SECURITY is not set
# CONFIG_HARDENED_USERCOPY is not set
# CONFIG_FORTIFY_SOURCE is not set
+3 -2
View File
@@ -668,7 +668,9 @@ CONFIG_SYN_COOKIES=y
# CONFIG_INET_AH is not set
# CONFIG_INET_ESP is not set
# CONFIG_INET_IPCOMP is not set
# CONFIG_INET_DIAG is not set
CONFIG_INET_DIAG=y
CONFIG_INET_TCP_DIAG=y
CONFIG_INET_DIAG_DESTROY=y
# CONFIG_TCP_CONG_ADVANCED is not set
CONFIG_DEFAULT_TCP_CONG="cubic"
# CONFIG_TCP_MD5SIG is not set
@@ -5601,7 +5603,6 @@ CONFIG_IO_WQ=y
# CONFIG_TRUSTED_KEYS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
# CONFIG_SECURITY_NETWORK_XFRM is not set
CONFIG_LSM_MMAP_MIN_ADDR=32768
# CONFIG_FORTIFY_SOURCE is not set
@@ -5475,7 +5475,6 @@ CONFIG_EPFS_DEBUG=y
# CONFIG_BIG_KEYS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
# CONFIG_SECURITY_NETWORK_XFRM is not set
CONFIG_LSM_MMAP_MIN_ADDR=32768
# CONFIG_HARDENED_USERCOPY is not set
@@ -5538,7 +5538,6 @@ CONFIG_IO_WQ=y
# CONFIG_TRUSTED_KEYS is not set
# CONFIG_ENCRYPTED_KEYS is not set
# CONFIG_KEY_DH_OPERATIONS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
# CONFIG_SECURITY_NETWORK_XFRM is not set
CONFIG_LSM_MMAP_MIN_ADDR=32768
# CONFIG_HARDENED_USERCOPY is not set