Files
chenjinxiang3 0cac1ebf7a 内核defconfig修复:禁用QEMU不支持的安全特性和MTE
qemu-arm-linux_standard_defconfig修改:
- 禁用:CONFIG_KSM、CONFIG_SECURITY、CONFIG_SECURITY_SELINUX、CONFIG_FS_VERITY、CONFIG_SECURITY_CODE_SIGN、CONFIG_SECURITY_XPM、CONFIG_ARM64_MTE
- 启用:CONFIG_SECURITYFS、CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR、CONFIG_DEFAULT_SECURITY_DAC
QEMU虚拟平台不需要SELinux、代码签名、XPM等安全特性,禁用后避免内核编译依赖缺失;MTE因QEMU不支持需禁用;DEFAULT_SECURITY_DAC作为禁用SELinux后的替代安全模型

Co-Authored-By: Agent
Signed-off-by: chenjinxiang3 <chenjinxiang3@huawei.com>
Change-Id: I8ad3bf6aa6b32f9201b4429f7f519eef53fab1d0
2026-06-01 16:58:24 +08:00
..
2024-10-16 14:51:44 +08:00