From mboxrd@z Thu Jan 1 00:00:00 1970 From: Arne Fitzenreiter To: development@lists.ipfire.org Subject: [PATCH 4/5] kernel: update config (disable AUDIT subsys) Date: Thu, 07 Sep 2017 21:54:38 +0000 Message-ID: <1504821279-1877-4-git-send-email-arne_f@ipfire.org> In-Reply-To: <1504821279-1877-1-git-send-email-arne_f@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5735510206442952419==" List-Id: --===============5735510206442952419== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable audit support was removed from the userspace so also the kernel not need it a= nymore. fixes #11465 Signed-off-by: Arne Fitzenreiter --- kernel/config-arm-generic | 11 +++++------ kernel/config-arm64-generic | 3 +-- kernel/config-generic | 28 +++++++--------------------- kernel/config-x86-generic | 7 ++++++- kernel/kernel.nm | 1 - 5 files changed, 19 insertions(+), 31 deletions(-) diff --git a/kernel/config-arm-generic b/kernel/config-arm-generic index 8f7f464..130c530 100644 --- a/kernel/config-arm-generic +++ b/kernel/config-arm-generic @@ -428,6 +428,11 @@ CONFIG_DRM_MESON=3Dm CONFIG_DRM_MESON_DW_HDMI=3Dm =20 # +# Frame buffer Devices +# +# CONFIG_FB_BOOT_VESA_SUPPORT is not set + +# # Frame buffer hardware drivers # # CONFIG_FB_ARMCLCD is not set @@ -725,11 +730,6 @@ CONFIG_RCU_CPU_STALL_TIMEOUT=3D21 # CONFIG_CORESIGHT is not set =20 # -# Security options -# -CONFIG_LSM_MMAP_MIN_ADDR=3D32768 - -# # Crypto core or helper # CONFIG_CRYPTO_GF128MUL=3Dm @@ -748,5 +748,4 @@ CONFIG_CRYPTO_CHACHA20_NEON=3Dm # # Library routines # -CONFIG_AUDIT_GENERIC=3Dy CONFIG_LIBFDT=3Dy diff --git a/kernel/config-arm64-generic b/kernel/config-arm64-generic index 208c138..ef5aca3 100644 --- a/kernel/config-arm64-generic +++ b/kernel/config-arm64-generic @@ -400,7 +400,7 @@ CONFIG_HISI_KIRIN_DW_DSI=3Dm # # Frame buffer hardware drivers # -# CONFIG_FB_EFI is not set +CONFIG_FB_EFI=3Dy =20 # # Console display driver support @@ -709,6 +709,5 @@ CONFIG_CRYPTO_AES_ARM64_BS=3Dm # Library routines # CONFIG_AUDIT_ARCH_COMPAT_GENERIC=3Dy -CONFIG_AUDIT_COMPAT_GENERIC=3Dy CONFIG_HAS_IOPORT_MAP=3Dy CONFIG_UCS2_STRING=3Dy diff --git a/kernel/config-generic b/kernel/config-generic index 5fac561..c151769 100644 --- a/kernel/config-generic +++ b/kernel/config-generic @@ -34,11 +34,8 @@ CONFIG_POSIX_MQUEUE_SYSCTL=3Dy CONFIG_CROSS_MEMORY_ATTACH=3Dy CONFIG_FHANDLE=3Dy # CONFIG_USELIB is not set -CONFIG_AUDIT=3Dy +# CONFIG_AUDIT is not set CONFIG_HAVE_ARCH_AUDITSYSCALL=3Dy -CONFIG_AUDITSYSCALL=3Dy -CONFIG_AUDIT_WATCH=3Dy -CONFIG_AUDIT_TREE=3Dy =20 # # IRQ subsystem @@ -697,7 +694,6 @@ CONFIG_NETFILTER_XT_SET=3Dm # # Xtables targets # -CONFIG_NETFILTER_XT_TARGET_AUDIT=3Dm CONFIG_NETFILTER_XT_TARGET_CLASSIFY=3Dm CONFIG_NETFILTER_XT_TARGET_CONNMARK=3Dm CONFIG_NETFILTER_XT_TARGET_CONNSECMARK=3Dm @@ -3795,10 +3791,9 @@ CONFIG_FIRMWARE_EDID=3Dy CONFIG_FB_CMDLINE=3Dy CONFIG_FB_NOTIFY=3Dy # CONFIG_FB_DDC is not set -CONFIG_FB_BOOT_VESA_SUPPORT=3Dy -CONFIG_FB_CFB_FILLRECT=3Dm -CONFIG_FB_CFB_COPYAREA=3Dm -CONFIG_FB_CFB_IMAGEBLIT=3Dm +CONFIG_FB_CFB_FILLRECT=3Dy +CONFIG_FB_CFB_COPYAREA=3Dy +CONFIG_FB_CFB_IMAGEBLIT=3Dy # CONFIG_FB_CFB_REV_PIXELS_IN_BYTE is not set CONFIG_FB_SYS_FILLRECT=3Dm CONFIG_FB_SYS_COPYAREA=3Dm @@ -5578,7 +5573,7 @@ CONFIG_ENCRYPTED_KEYS=3Dm # CONFIG_KEY_DH_OPERATIONS is not set CONFIG_SECURITY_DMESG_RESTRICT=3Dy CONFIG_SECURITY=3Dy -CONFIG_SECURITY_WRITABLE_HOOKS=3Dy +# CONFIG_SECURITY_WRITABLE_HOOKS is not set CONFIG_SECURITYFS=3Dy CONFIG_SECURITY_NETWORK=3Dy CONFIG_SECURITY_NETWORK_XFRM=3Dy @@ -5587,13 +5582,6 @@ CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=3Dy CONFIG_HARDENED_USERCOPY=3Dy CONFIG_HARDENED_USERCOPY_PAGESPAN=3Dy # CONFIG_STATIC_USERMODEHELPER is not set -CONFIG_SECURITY_SELINUX=3Dy -CONFIG_SECURITY_SELINUX_BOOTPARAM=3Dy -CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=3D0 -CONFIG_SECURITY_SELINUX_DISABLE=3Dy -CONFIG_SECURITY_SELINUX_DEVELOP=3Dy -CONFIG_SECURITY_SELINUX_AVC_STATS=3Dy -CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=3D1 # CONFIG_SECURITY_SMACK is not set # CONFIG_SECURITY_TOMOYO is not set # CONFIG_SECURITY_APPARMOR is not set @@ -5603,12 +5591,10 @@ CONFIG_INTEGRITY=3Dy CONFIG_INTEGRITY_SIGNATURE=3Dy CONFIG_INTEGRITY_ASYMMETRIC_KEYS=3Dy CONFIG_INTEGRITY_TRUSTED_KEYRING=3Dy -CONFIG_INTEGRITY_AUDIT=3Dy # CONFIG_IMA is not set # CONFIG_EVM is not set -CONFIG_DEFAULT_SECURITY_SELINUX=3Dy -# CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_DEFAULT_SECURITY=3D"selinux" +CONFIG_DEFAULT_SECURITY_DAC=3Dy +CONFIG_DEFAULT_SECURITY=3D"" CONFIG_XOR_BLOCKS=3Dm CONFIG_ASYNC_CORE=3Dm CONFIG_ASYNC_MEMCPY=3Dm diff --git a/kernel/config-x86-generic b/kernel/config-x86-generic index 50318e3..1ed2ee2 100644 --- a/kernel/config-x86-generic +++ b/kernel/config-x86-generic @@ -1106,6 +1106,11 @@ CONFIG_DRM_VMWGFX=3Dm CONFIG_HSA_AMD=3Dm =20 # +# Frame buffer Devices +# +CONFIG_FB_BOOT_VESA_SUPPORT=3Dy + +# # Frame buffer hardware drivers # # CONFIG_FB_ARC is not set @@ -1482,6 +1487,7 @@ CONFIG_EFIVAR_FS=3Dm # # Compile-time checks and compiler options # +CONFIG_HARDLOCKUP_CHECK_TIMESTAMP=3Dy CONFIG_ARCH_WANT_FRAME_POINTERS=3Dy CONFIG_FRAME_POINTER=3Dy CONFIG_STACK_VALIDATION=3Dy @@ -1553,7 +1559,6 @@ CONFIG_OPTIMIZE_INLINING=3Dy # CONFIG_KEYS_COMPAT=3Dy CONFIG_INTEL_TXT=3Dy -CONFIG_LSM_MMAP_MIN_ADDR=3D65536 =20 # # Crypto core or helper diff --git a/kernel/kernel.nm b/kernel/kernel.nm index 0724d4d..4936b6a 100644 --- a/kernel/kernel.nm +++ b/kernel/kernel.nm @@ -33,7 +33,6 @@ build =20 requires asciidoc - audit-devel bc binutils >=3D 2.25 binutils-devel --=20 2.6.3 --===============5735510206442952419==--