lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Fri, 11 Feb 2022 10:23:16 +0100 From: Marcel Ziswiler <marcel@...wiler.com> To: linux-arm-kernel@...ts.infradead.org Cc: Marek Vasut <marek.vasut@...il.com>, Marcel Ziswiler <marcel.ziswiler@...adex.com>, Song Liu <songliubraving@...com>, Krzysztof Kozlowski <krzysztof.kozlowski@...onical.com>, Adam Ford <aford173@...il.com>, Alexei Starovoitov <ast@...nel.org>, Andrii Nakryiko <andrii@...nel.org>, Arnd Bergmann <arnd@...db.de>, Biju Das <biju.das.jz@...renesas.com>, Bjorn Andersson <bjorn.andersson@...aro.org>, Catalin Marinas <catalin.marinas@....com>, Daniel Borkmann <daniel@...earbox.net>, Enric Balletbo i Serra <enric.balletbo@...labora.com>, Geert Uytterhoeven <geert+renesas@...der.be>, John Fastabend <john.fastabend@...il.com>, KP Singh <kpsingh@...nel.org>, Krzysztof Kozlowski <krzk@...nel.org>, Martin KaFai Lau <kafai@...com>, Olof Johansson <olof@...om.net>, Shawn Guo <shawnguo@...nel.org>, Will Deacon <will@...nel.org>, Yonghong Song <yhs@...com>, bpf@...r.kernel.org, linux-kernel@...r.kernel.org, netdev@...r.kernel.org Subject: [PATCH v6 06/12] arm64: defconfig: enable bpf/cgroup firewalling From: Marcel Ziswiler <marcel.ziswiler@...adex.com> This avoids the following systemd warning: [ 2.618538] systemd[1]: system-getty.slice: unit configures an IP firewall, but the local system does not support BPF/cgroup firewalling. [ 2.630916] systemd[1]: (This warning is only shown for the first unit using IP firewalling.) Signed-off-by: Marcel Ziswiler <marcel.ziswiler@...adex.com> Acked-by: Song Liu <songliubraving@...com> Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@...onical.com> --- (no changes since v3) Changes in v3: - Add Krzysztof's reviewed-by tag. Changes in v2: - Add Song's acked-by tag. arch/arm64/configs/defconfig | 2 ++ 1 file changed, 2 insertions(+) diff --git a/arch/arm64/configs/defconfig b/arch/arm64/configs/defconfig index 530ad076b5cb..444fec9ec73a 100644 --- a/arch/arm64/configs/defconfig +++ b/arch/arm64/configs/defconfig @@ -3,6 +3,7 @@ CONFIG_POSIX_MQUEUE=y CONFIG_AUDIT=y CONFIG_NO_HZ_IDLE=y CONFIG_HIGH_RES_TIMERS=y +CONFIG_BPF_SYSCALL=y CONFIG_BPF_JIT=y CONFIG_PREEMPT=y CONFIG_IRQ_TIME_ACCOUNTING=y @@ -22,6 +23,7 @@ CONFIG_CPUSETS=y CONFIG_CGROUP_DEVICE=y CONFIG_CGROUP_CPUACCT=y CONFIG_CGROUP_PERF=y +CONFIG_CGROUP_BPF=y CONFIG_USER_NS=y CONFIG_SCHED_AUTOGROUP=y CONFIG_BLK_DEV_INITRD=y -- 2.33.1
Powered by blists - more mailing lists