openharmony/kernel_linux_config
1
0
Fork 0
mirror of https://github.com/openharmony/kernel_linux_config.git synced 2026-07-22 13:15:38 -04:00
Code Issues Packages Projects Releases Wiki Activity

设置CONFIG_MODULE_SIG=y和CONFIG_MODULE_SIG_FORCE=y，增强SELinux对insmod的管控

Browse Source 
Signed-off-by: Ywenrui44091 <yaowenrui2@huawei.com>
This commit is contained in:
Ywenrui44091
2023-07-28 11:00:51 +08:00
parent 8a29b999fc
commit 39f9575fc5
17 changed files with 7 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
linux-5.10/arch/arm/configs/hispark_phoenix_standard_defconfig
-1
View File
@@ -588,7 +588,6 @@ CONFIG_MODULE_UNLOAD=y
# CONFIG_MODULE_FORCE_UNLOAD is not set
CONFIG_MODVERSIONS=y
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
# CONFIG_UNUSED_SYMBOLS is not set
linux-5.10/arch/arm/configs/hispark_taurus_small_defconfig
-1
View File
@@ -622,7 +622,6 @@ CONFIG_MODULE_UNLOAD=y
CONFIG_MODULE_FORCE_UNLOAD=y
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
# CONFIG_UNUSED_SYMBOLS is not set
linux-5.10/arch/arm/configs/hispark_taurus_standard_defconfig
-1
View File
@@ -564,7 +564,6 @@ CONFIG_MODULE_UNLOAD=y
CONFIG_MODULE_FORCE_UNLOAD=y
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_TRIM_UNUSED_KSYMS is not set
CONFIG_BLOCK=y
linux-5.10/arch/arm/configs/qemu-arm-linux_standard_defconfig
-1
View File
@@ -969,7 +969,6 @@ CONFIG_MODULE_UNLOAD=y
# CONFIG_MODULE_FORCE_UNLOAD is not set
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
# CONFIG_UNUSED_SYMBOLS is not set
linux-5.10/arch/arm/configs/small_common_defconfig
-1
View File
@@ -540,7 +540,6 @@ CONFIG_MODULE_UNLOAD=y
CONFIG_MODULE_FORCE_UNLOAD=y
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_TRIM_UNUSED_KSYMS is not set
CONFIG_BLOCK=y
linux-5.10/arch/arm/configs/standard_common_defconfig
-1
View File
@@ -528,7 +528,6 @@ CONFIG_MODULE_UNLOAD=y
CONFIG_MODULE_FORCE_UNLOAD=y
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_TRIM_UNUSED_KSYMS is not set
CONFIG_BLOCK=y
linux-5.10/arch/arm64/configs/rk3399_standard_defconfig
-1
View File
@@ -687,7 +687,6 @@ CONFIG_MODULE_UNLOAD=y
CONFIG_MODULE_FORCE_UNLOAD=y
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
# CONFIG_UNUSED_SYMBOLS is not set
linux-5.10/arch/arm64/configs/rk3568_standard_defconfig
-1
View File
@@ -695,7 +695,6 @@ CONFIG_MODULE_UNLOAD=y
CONFIG_MODULE_FORCE_UNLOAD=y
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
# CONFIG_UNUSED_SYMBOLS is not set
linux-5.10/arch/arm64/configs/unionpi_tiger_standard_defconfig
-1
View File
@@ -710,7 +710,6 @@ CONFIG_MODULE_UNLOAD=y
# CONFIG_MODULE_FORCE_UNLOAD is not set
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
# CONFIG_UNUSED_SYMBOLS is not set
linux-5.10/arch/x86/configs/qemu-x86_64-linux_standard_defconfig
-1
View File
@@ -777,7 +777,6 @@ CONFIG_MODULE_UNLOAD=y
CONFIG_MODULE_FORCE_UNLOAD=y
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
# CONFIG_UNUSED_SYMBOLS is not set
linux-5.10/base_defconfig
+7 -1
View File
@@ -78,4 +78,10 @@ CONFIG_SECURITY=y
#Security DMESG restrict
#
CONFIG_SECURITY_DMESG_RESTRICT=y
# end of Security DMESG restrict
# end of Security DMESG restrict
#Enhance SELinux's control over insmod
#
CONFIG_MODULE_SIG=y
CONFIG_MODULE_SIG_FORCE=y
#end of Enhance SELinux's control over insmod
linux-5.10/hispark_taurus/arch/arm_defconfig
-1
View File
@@ -653,7 +653,6 @@ CONFIG_MODULE_UNLOAD=y
CONFIG_MODULE_FORCE_UNLOAD=y
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_TRIM_UNUSED_KSYMS is not set
CONFIG_BLOCK=y
linux-5.10/qemu/arch/arm_defconfig
-1
View File
@@ -814,7 +814,6 @@ CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y
# CONFIG_MODULE_FORCE_UNLOAD is not set
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
# CONFIG_UNUSED_SYMBOLS is not set
linux-5.10/qemu/arch/x86_64_defconfig
-1
View File
@@ -628,7 +628,6 @@ CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y
CONFIG_MODULE_FORCE_UNLOAD=y
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
# CONFIG_UNUSED_SYMBOLS is not set
linux-5.10/rk3568/arch/arm64_defconfig
-1
View File
@@ -495,7 +495,6 @@ CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y
CONFIG_MODULE_FORCE_UNLOAD=y
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
# CONFIG_UNUSED_SYMBOLS is not set
linux-5.10/unionpi_tiger/arch/arm64_defconfig
-1
View File
@@ -506,7 +506,6 @@ CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y
# CONFIG_MODULE_FORCE_UNLOAD is not set
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
# CONFIG_UNUSED_SYMBOLS is not set
linux-5.10/yangfan/arch/arm64_defconfig
-1
View File
@@ -482,7 +482,6 @@ CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y
CONFIG_MODULE_FORCE_UNLOAD=y
# CONFIG_MODVERSIONS is not set
# CONFIG_MODULE_SRCVERSION_ALL is not set
# CONFIG_MODULE_SIG is not set
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
# CONFIG_UNUSED_SYMBOLS is not set