linux-kernel - [PATCH v2 2/2] ARM: multi_v7_defconfig: Improve use with systemd

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20181126195905.5427-2-otavio@ossystems.com.br>
Date:   Mon, 26 Nov 2018 17:59:05 -0200
From:   Otavio Salvador <otavio@...ystems.com.br>
To:     linux-kernel@...r.kernel.org, linux-arm-kernel@...ts.infradead.org
Cc:     Fabio Berton <fabio.berton@...ystems.com.br>,
        Otavio Salvador <otavio@...ystems.com.br>,
        Yannick Fertré <yannick.fertre@...com>,
        Arnd Bergmann <arnd@...db.de>, Eric Anholt <eric@...olt.net>,
        Alexandre Torgue <alexandre.torgue@...com>,
        Stefan Wahren <stefan.wahren@...e.com>,
        Stefan Agner <stefan@...er.ch>,
        Tony Lindgren <tony@...mide.com>,
        Geert Uytterhoeven <geert+renesas@...der.be>,
        Olof Johansson <olof@...om.net>,
        Russell King <linux@...linux.org.uk>,
        Simon Horman <horms+renesas@...ge.net.au>
Subject: [PATCH v2 2/2] ARM: multi_v7_defconfig: Improve use with systemd

From: Fabio Berton <fabio.berton@...ystems.com.br>

This enables following options:

 - CONFIG_CGROUP_BPF
 - CONFIG_NAMESPACES
 - CONFIG_USER_NS
 - CONFIG_CHECKPOINT_RESTORE
 - CONFIG_BPF_SYSCALL

Those are based on recommendation from Gentoo wiki[1] which describes
the recommended and required kernel options for systemd use.

 1. https://wiki.gentoo.org/wiki/Systemd#Kernel

Signed-off-by: Fabio Berton <fabio.berton@...ystems.com.br>
Signed-off-by: Otavio Salvador <otavio@...ystems.com.br>
---

Changes in v2:
- rework commit log

 arch/arm/configs/multi_v7_defconfig | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/arch/arm/configs/multi_v7_defconfig b/arch/arm/configs/multi_v7_defconfig
index a8ec309d182a..34c8a745d951 100644
--- a/arch/arm/configs/multi_v7_defconfig
+++ b/arch/arm/configs/multi_v7_defconfig
@@ -2,7 +2,12 @@ CONFIG_SYSVIPC=y
 CONFIG_NO_HZ=y
 CONFIG_HIGH_RES_TIMERS=y
 CONFIG_CGROUPS=y
+CONFIG_CGROUP_BPF=y
+CONFIG_NAMESPACES=y
+CONFIG_USER_NS=y
+CONFIG_CHECKPOINT_RESTORE=y
 CONFIG_BLK_DEV_INITRD=y
+CONFIG_BPF_SYSCALL=y
 CONFIG_EMBEDDED=y
 CONFIG_PERF_EVENTS=y
 CONFIG_MODULES=y
-- 
2.19.2