From 544e0c505e80a22e5c7550990ec15a25c695c0ab Mon Sep 17 00:00:00 2001 From: Alex Date: Thu, 15 Aug 2024 13:43:36 +0200 Subject: [PATCH] rockchip64: Enable `CONFIG_SECURITY_DMESG_RESTRICT` kernel option (#7080) * rockchip64: edge: rewrite kernel config * rockchip64: edge: set CONFIG_SECURITY_DMESG_RESTRICT=y Advised for KASLR-enabled kernels - no side effect for non-KASLR * rockchip64: current: rewrite kernel config * rockchip64: current: set CONFIG_SECURITY_DMESG_RESTRICT=y Advised for KASLR-enabled kernels - no side effect for non-KASLR --- config/kernel/linux-rockchip64-current.config | 5 +++-- config/kernel/linux-rockchip64-edge.config | 4 ++-- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/config/kernel/linux-rockchip64-current.config b/config/kernel/linux-rockchip64-current.config index f570d8b59671..d15c8a9da284 100644 --- a/config/kernel/linux-rockchip64-current.config +++ b/config/kernel/linux-rockchip64-current.config @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm64 6.6.44 Kernel Configuration +# Linux/arm64 6.6.45 Kernel Configuration # CONFIG_CC_VERSION_TEXT="aarch64-linux-gnu-gcc (Ubuntu 13.2.0-23ubuntu4) 13.2.0" CONFIG_CC_IS_GCC=y @@ -928,6 +928,7 @@ CONFIG_MIGRATION=y CONFIG_ARCH_ENABLE_HUGEPAGE_MIGRATION=y CONFIG_ARCH_ENABLE_THP_MIGRATION=y CONFIG_CONTIG_ALLOC=y +CONFIG_PCP_BATCH_SCALE_MAX=5 CONFIG_PHYS_ADDR_T_64BIT=y CONFIG_MMU_NOTIFIER=y CONFIG_KSM=y @@ -9225,7 +9226,7 @@ CONFIG_TRUSTED_KEYS=m CONFIG_ENCRYPTED_KEYS=y # CONFIG_USER_DECRYPTED_DATA is not set CONFIG_KEY_DH_OPERATIONS=y -# CONFIG_SECURITY_DMESG_RESTRICT is not set +CONFIG_SECURITY_DMESG_RESTRICT=y CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y diff --git a/config/kernel/linux-rockchip64-edge.config b/config/kernel/linux-rockchip64-edge.config index 724892035e9e..2d9397ab35e6 100644 --- a/config/kernel/linux-rockchip64-edge.config +++ b/config/kernel/linux-rockchip64-edge.config @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm64 6.10.3 Kernel Configuration +# Linux/arm64 6.10.4 Kernel Configuration # CONFIG_CC_VERSION_TEXT="aarch64-linux-gnu-gcc (Ubuntu 13.2.0-23ubuntu4) 13.2.0" CONFIG_CC_IS_GCC=y @@ -9409,7 +9409,7 @@ CONFIG_TRUSTED_KEYS=m CONFIG_ENCRYPTED_KEYS=y # CONFIG_USER_DECRYPTED_DATA is not set CONFIG_KEY_DH_OPERATIONS=y -# CONFIG_SECURITY_DMESG_RESTRICT is not set +CONFIG_SECURITY_DMESG_RESTRICT=y CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y