|
|
@@ -143,7 +143,6 @@ CONFIG_RCU_BOOST_DELAY=500
|
|
|
# CONFIG_TASKS_TRACE_RCU_READ_MB is not set
|
|
|
# end of RCU Subsystem
|
|
|
|
|
|
-CONFIG_BUILD_BIN2C=y
|
|
|
CONFIG_IKCONFIG=y
|
|
|
CONFIG_IKCONFIG_PROC=y
|
|
|
# CONFIG_IKHEADERS is not set
|
|
|
@@ -385,7 +384,7 @@ CONFIG_DMI=y
|
|
|
CONFIG_NR_CPUS_RANGE_BEGIN=2
|
|
|
CONFIG_NR_CPUS_RANGE_END=512
|
|
|
CONFIG_NR_CPUS_DEFAULT=64
|
|
|
-CONFIG_NR_CPUS=320
|
|
|
+CONFIG_NR_CPUS=32
|
|
|
CONFIG_SCHED_SMT=y
|
|
|
CONFIG_SCHED_MC=y
|
|
|
CONFIG_SCHED_MC_PRIO=y
|
|
|
@@ -569,10 +568,10 @@ CONFIG_CPU_FREQ=y
|
|
|
CONFIG_CPU_FREQ_GOV_ATTR_SET=y
|
|
|
CONFIG_CPU_FREQ_GOV_COMMON=y
|
|
|
CONFIG_CPU_FREQ_STAT=y
|
|
|
-# CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE is not set
|
|
|
+CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE=y
|
|
|
# CONFIG_CPU_FREQ_DEFAULT_GOV_POWERSAVE is not set
|
|
|
# CONFIG_CPU_FREQ_DEFAULT_GOV_USERSPACE is not set
|
|
|
-CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL=y
|
|
|
+# CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL is not set
|
|
|
CONFIG_CPU_FREQ_GOV_PERFORMANCE=y
|
|
|
CONFIG_CPU_FREQ_GOV_POWERSAVE=y
|
|
|
CONFIG_CPU_FREQ_GOV_USERSPACE=y
|
|
|
@@ -757,8 +756,7 @@ CONFIG_SECCOMP_FILTER=y
|
|
|
# CONFIG_SECCOMP_CACHE_DEBUG is not set
|
|
|
CONFIG_HAVE_ARCH_STACKLEAK=y
|
|
|
CONFIG_HAVE_STACKPROTECTOR=y
|
|
|
-CONFIG_STACKPROTECTOR=y
|
|
|
-CONFIG_STACKPROTECTOR_STRONG=y
|
|
|
+# CONFIG_STACKPROTECTOR is not set
|
|
|
CONFIG_LTO=y
|
|
|
CONFIG_LTO_CLANG=y
|
|
|
CONFIG_ARCH_SUPPORTS_LTO_CLANG=y
|
|
|
@@ -797,7 +795,7 @@ CONFIG_OLD_SIGSUSPEND3=y
|
|
|
CONFIG_COMPAT_OLD_SIGACTION=y
|
|
|
CONFIG_COMPAT_32BIT_TIME=y
|
|
|
CONFIG_HAVE_ARCH_VMAP_STACK=y
|
|
|
-CONFIG_VMAP_STACK=y
|
|
|
+# CONFIG_VMAP_STACK is not set
|
|
|
CONFIG_ARCH_HAS_STRICT_KERNEL_RWX=y
|
|
|
CONFIG_STRICT_KERNEL_RWX=y
|
|
|
CONFIG_ARCH_HAS_STRICT_MODULE_RWX=y
|
|
|
@@ -1071,7 +1069,6 @@ CONFIG_IPV6_SEG6_LWTUNNEL=y
|
|
|
CONFIG_IPV6_SEG6_HMAC=y
|
|
|
CONFIG_IPV6_SEG6_BPF=y
|
|
|
CONFIG_IPV6_RPL_LWTUNNEL=y
|
|
|
-CONFIG_NETLABEL=y
|
|
|
CONFIG_MPTCP=y
|
|
|
CONFIG_MPTCP_IPV6=y
|
|
|
CONFIG_NETWORK_SECMARK=y
|
|
|
@@ -1268,7 +1265,6 @@ CONFIG_IP_NF_MANGLE=y
|
|
|
# CONFIG_IP_NF_TARGET_ECN is not set
|
|
|
# CONFIG_IP_NF_TARGET_TTL is not set
|
|
|
# CONFIG_IP_NF_RAW is not set
|
|
|
-# CONFIG_IP_NF_SECURITY is not set
|
|
|
# CONFIG_IP_NF_ARPTABLES is not set
|
|
|
# end of IP: Netfilter Configuration
|
|
|
|
|
|
@@ -1301,7 +1297,6 @@ CONFIG_IP6_NF_FILTER=y
|
|
|
# CONFIG_IP6_NF_TARGET_SYNPROXY is not set
|
|
|
CONFIG_IP6_NF_MANGLE=y
|
|
|
# CONFIG_IP6_NF_RAW is not set
|
|
|
-# CONFIG_IP6_NF_SECURITY is not set
|
|
|
CONFIG_IP6_NF_NAT=y
|
|
|
# CONFIG_IP6_NF_TARGET_MASQUERADE is not set
|
|
|
# CONFIG_IP6_NF_TARGET_NPT is not set
|
|
|
@@ -5234,7 +5229,6 @@ CONFIG_FSNOTIFY=y
|
|
|
CONFIG_DNOTIFY=y
|
|
|
CONFIG_INOTIFY_USER=y
|
|
|
CONFIG_FANOTIFY=y
|
|
|
-CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y
|
|
|
CONFIG_QUOTA=y
|
|
|
CONFIG_QUOTA_NETLINK_INTERFACE=y
|
|
|
# CONFIG_PRINT_QUOTA_WARNING is not set
|
|
|
@@ -5347,7 +5341,6 @@ CONFIG_PNFS_FILE_LAYOUT=y
|
|
|
CONFIG_PNFS_BLOCK=y
|
|
|
CONFIG_NFS_V4_1_IMPLEMENTATION_ID_DOMAIN="kernel.org"
|
|
|
CONFIG_NFS_V4_1_MIGRATION=y
|
|
|
-CONFIG_NFS_V4_SECURITY_LABEL=y
|
|
|
# CONFIG_NFS_USE_LEGACY_DNS is not set
|
|
|
CONFIG_NFS_USE_KERNEL_DNS=y
|
|
|
CONFIG_NFS_DEBUG=y
|
|
|
@@ -5363,7 +5356,6 @@ CONFIG_NFSD_BLOCKLAYOUT=y
|
|
|
CONFIG_NFSD_SCSILAYOUT=y
|
|
|
# CONFIG_NFSD_FLEXFILELAYOUT is not set
|
|
|
CONFIG_NFSD_V4_2_INTER_SSC=y
|
|
|
-CONFIG_NFSD_V4_SECURITY_LABEL=y
|
|
|
CONFIG_GRACE_PERIOD=y
|
|
|
CONFIG_LOCKD=y
|
|
|
CONFIG_LOCKD_V4=y
|
|
|
@@ -5448,43 +5440,15 @@ CONFIG_ENCRYPTED_KEYS=y
|
|
|
CONFIG_KEY_DH_OPERATIONS=y
|
|
|
CONFIG_KEY_NOTIFICATIONS=y
|
|
|
CONFIG_SECURITY_DMESG_RESTRICT=y
|
|
|
-CONFIG_SECURITY=y
|
|
|
+# CONFIG_SECURITY is not set
|
|
|
CONFIG_SECURITYFS=y
|
|
|
-CONFIG_SECURITY_NETWORK=y
|
|
|
CONFIG_PAGE_TABLE_ISOLATION=y
|
|
|
-CONFIG_SECURITY_NETWORK_XFRM=y
|
|
|
-CONFIG_SECURITY_PATH=y
|
|
|
# CONFIG_INTEL_TXT is not set
|
|
|
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
|
|
|
-CONFIG_HARDENED_USERCOPY=y
|
|
|
-CONFIG_HARDENED_USERCOPY_FALLBACK=y
|
|
|
+# CONFIG_HARDENED_USERCOPY is not set
|
|
|
CONFIG_FORTIFY_SOURCE=y
|
|
|
# CONFIG_STATIC_USERMODEHELPER is not set
|
|
|
-CONFIG_SECURITY_SMACK=y
|
|
|
-CONFIG_SECURITY_SMACK_BRINGUP=y
|
|
|
-CONFIG_SECURITY_SMACK_NETFILTER=y
|
|
|
-CONFIG_SECURITY_SMACK_APPEND_SIGNALS=y
|
|
|
-CONFIG_SECURITY_TOMOYO=y
|
|
|
-CONFIG_SECURITY_TOMOYO_MAX_ACCEPT_ENTRY=2048
|
|
|
-CONFIG_SECURITY_TOMOYO_MAX_AUDIT_LOG=1024
|
|
|
-# CONFIG_SECURITY_TOMOYO_OMIT_USERSPACE_LOADER is not set
|
|
|
-CONFIG_SECURITY_TOMOYO_POLICY_LOADER="/sbin/tomoyo-init"
|
|
|
-CONFIG_SECURITY_TOMOYO_ACTIVATION_TRIGGER="/sbin/init"
|
|
|
-# CONFIG_SECURITY_TOMOYO_INSECURE_BUILTIN_SETTING is not set
|
|
|
-# CONFIG_SECURITY_APPARMOR is not set
|
|
|
-CONFIG_SECURITY_LOADPIN=y
|
|
|
-CONFIG_SECURITY_LOADPIN_ENFORCE=y
|
|
|
-CONFIG_SECURITY_YAMA=y
|
|
|
-CONFIG_SECURITY_SAFESETID=y
|
|
|
-CONFIG_SECURITY_LOCKDOWN_LSM=y
|
|
|
-# CONFIG_SECURITY_LOCKDOWN_LSM_EARLY is not set
|
|
|
-CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
|
|
|
-# CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set
|
|
|
-# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
|
|
|
-# CONFIG_INTEGRITY is not set
|
|
|
# CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set
|
|
|
-# CONFIG_DEFAULT_SECURITY_SMACK is not set
|
|
|
-# CONFIG_DEFAULT_SECURITY_TOMOYO is not set
|
|
|
CONFIG_DEFAULT_SECURITY_DAC=y
|
|
|
CONFIG_LSM="lockdown,yama,bpf"
|
|
|
|
Donald Carr