config配置修改

Signed-off-by: wanxiaoqing <wanxiaoqing@huawei.com>
This commit is contained in:
wanxiaoqing
2023-08-08 19:28:07 +08:00
parent 1a807cbcc5
commit a0db75a049
3 changed files with 13 additions and 11 deletions
+13
View File
@@ -6,6 +6,19 @@ CONFIG_EPOLL=y
CONFIG_EVENTFD=y
# end of General setup
CONFIG_ARM64_PTR_AUTH = y
CONFIG_INIT_STACK_ALL_ZERO=y
CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_RANDOMIZE_BASE=y
CONFIG_ARM64_PAN=y
CONFIG_CFI_CLANG=y
CONFIG_HAVE_ARCH_SECCOMP=y
CONFIG_HAVE_ARCH_SECCOMP_FILTER=y
CONFIG_SECURITY_XPM=y
CONFIG_SECCOMP=y
CONFIG_SECCOMP_FILTER=y
CONFIG_MMU=y
#
-5
View File
@@ -300,7 +300,6 @@ CONFIG_SETEND_EMULATION=y
# ARMv8.1 architectural features
#
CONFIG_ARM64_HW_AFDBM=y
CONFIG_ARM64_PAN=y
CONFIG_AS_HAS_LSE_ATOMICS=y
CONFIG_ARM64_VHE=y
# end of ARMv8.1 architectural features
@@ -469,7 +468,6 @@ CONFIG_ARCH_WANT_COMPAT_IPC_PARSE_VERSION=y
CONFIG_LTO=y
CONFIG_LTO_CLANG=y
CONFIG_LTO_CLANG_THIN=y
CONFIG_CFI_CLANG=y
CONFIG_CFI_CLANG_SHADOW=y
CONFIG_HAVE_MOVE_PMD=y
CONFIG_MODULES_USE_ELF_RELA=y
@@ -5633,8 +5631,6 @@ CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity,bpf,selinux"
#
# CONFIG_INIT_STACK_NONE is not set
# CONFIG_INIT_STACK_ALL_PATTERN is not set
CONFIG_INIT_STACK_ALL_ZERO=y
CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
# end of Memory initialization
# end of Kernel hardening options
@@ -6096,6 +6092,5 @@ CONFIG_BLACKBOX_ROCKCHIP=y
#
# executable permission manager
#
CONFIG_SECURITY_XPM=y
CONFIG_SECURITY_XPM_DEBUG=y
# end of executable permission manager
-6
View File
@@ -167,7 +167,6 @@ CONFIG_HAVE_ARCH_PFN_VALID=y
CONFIG_HW_PERF_EVENTS=y
CONFIG_KUSER_HELPERS=y
CONFIG_RELOCATABLE=y
CONFIG_RANDOMIZE_BASE=y
# end of Kernel Features
#
@@ -248,10 +247,6 @@ CONFIG_HAVE_PERF_USER_STACK_DUMP=y
CONFIG_HAVE_ARCH_JUMP_LABEL=y
CONFIG_HAVE_ARCH_JUMP_LABEL_RELATIVE=y
CONFIG_HAVE_ALIGNED_STRUCT_PAGE=y
CONFIG_HAVE_ARCH_SECCOMP=y
CONFIG_HAVE_ARCH_SECCOMP_FILTER=y
CONFIG_SECCOMP=y
CONFIG_SECCOMP_FILTER=y
CONFIG_HAVE_ARCH_STACKLEAK=y
CONFIG_HAVE_STACKPROTECTOR=y
CONFIG_HAVE_CONTEXT_TRACKING=y
@@ -987,7 +982,6 @@ CONFIG_SECURITYFS=y
CONFIG_SECURITY_NETWORK=y
CONFIG_SECURITY_PATH=y
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_SECURITY_SELINUX=y
CONFIG_SECURITY_SELINUX_BOOTPARAM=y
CONFIG_SECURITY_SELINUX_DEVELOP=y