[PATCH 5/6] UBUNTU: [Config] Common security and kernel hacking options.

Brad Figg brad.figg at canonical.com
Mon Aug 24 04:15:33 UTC 2009


Signed-off-by: Brad Figg <brad.figg at canonical.com>
---
 debian.mvl-dove/config/config.common.ubuntu |   78 ++++++--------------------
 1 files changed, 18 insertions(+), 60 deletions(-)

diff --git a/debian.mvl-dove/config/config.common.ubuntu b/debian.mvl-dove/config/config.common.ubuntu
index c8fab63..b638708 100644
--- a/debian.mvl-dove/config/config.common.ubuntu
+++ b/debian.mvl-dove/config/config.common.ubuntu
@@ -97,7 +97,7 @@ CONFIG_ARM=y
 # CONFIG_ARM_ERRATA_460075 is not set
 CONFIG_ARM_THUMB=y
 # CONFIG_ARM_THUMBEE is not set
-CONFIG_ARM_UNWIND=y
+# CONFIG_ARM_UNWIND is not set
 # CONFIG_ARPD is not set
 CONFIG_ASK_IP_FIB_HASH=y
 # CONFIG_ASYNC_TX_DMA is not set
@@ -166,7 +166,6 @@ CONFIG_BACKLIGHT_CLASS_DEVICE=y
 CONFIG_BACKLIGHT_DOVE=y
 CONFIG_BACKLIGHT_GENERIC=y
 CONFIG_BACKLIGHT_LCD_SUPPORT=y
-# CONFIG_BACKTRACE_SELF_TEST is not set
 CONFIG_BASE_FULL=y
 CONFIG_BASE_SMALL=0
 CONFIG_BATTERY_BQ2084=y
@@ -190,8 +189,6 @@ CONFIG_BLK_DEV=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
 # CONFIG_BLK_DEV_BSG is not set
 # CONFIG_BLK_DEV_COMPCACHE is not set
-# CONFIG_BLK_DEV_COMPCACHE_DEBUG is not set
-# CONFIG_BLK_DEV_COMPCACHE_STATS is not set
 # CONFIG_BLK_DEV_COW_COMMON is not set
 # CONFIG_BLK_DEV_DAC960 is not set
 # CONFIG_BLK_DEV_INITRD is not set
@@ -212,11 +209,6 @@ CONFIG_BLK_DEV_SR=m
 CONFIG_BLOCK=y
 # CONFIG_BNX2 is not set
 # CONFIG_BONDING is not set
-# CONFIG_BOOTPARAM_HUNG_TASK_PANIC is not set
-CONFIG_BOOTPARAM_HUNG_TASK_PANIC_VALUE=0
-# CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC is not set
-CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC_VALUE=0
-# CONFIG_BOOT_PRINTK_DELAY is not set
 # CONFIG_BOOT_TRACER is not set
 CONFIG_BPQETHER=m
 CONFIG_BRANCH_PROFILE_NONE=y
@@ -437,35 +429,11 @@ CONFIG_CRYPTO_ZLIB=m
 CONFIG_CUSE=m
 # CONFIG_DAVICOM_PHY is not set
 CONFIG_DCB=y
-# CONFIG_DEBUG_BLOCK_EXT_DEVT is not set
 # CONFIG_DEBUG_BUGVERBOSE is not set
-# CONFIG_DEBUG_DEVRES is not set
-# CONFIG_DEBUG_DRIVER is not set
-CONFIG_DEBUG_ERRORS=y
 CONFIG_DEBUG_FS=y
-# CONFIG_DEBUG_GPIO is not set
-CONFIG_DEBUG_INFO=y
-CONFIG_DEBUG_KERNEL=y
-# CONFIG_DEBUG_KMEMLEAK is not set
-# CONFIG_DEBUG_KOBJECT is not set
-# CONFIG_DEBUG_LIST is not set
-# CONFIG_DEBUG_LL is not set
-# CONFIG_DEBUG_LOCKING_API_SELFTESTS is not set
-# CONFIG_DEBUG_LOCK_ALLOC is not set
+# CONFIG_DEBUG_KERNEL is not set
 # CONFIG_DEBUG_MEMORY_INIT is not set
-# CONFIG_DEBUG_MUTEXES is not set
-# CONFIG_DEBUG_NOTIFIERS is not set
-# CONFIG_DEBUG_OBJECTS is not set
-# CONFIG_DEBUG_RT_MUTEXES is not set
-# CONFIG_DEBUG_SG is not set
-# CONFIG_DEBUG_SHIRQ is not set
-# CONFIG_DEBUG_SLAB is not set
-# CONFIG_DEBUG_SPINLOCK is not set
-# CONFIG_DEBUG_SPINLOCK_SLEEP is not set
-# CONFIG_DEBUG_STACK_USAGE is not set
-CONFIG_DEBUG_USER=y
-# CONFIG_DEBUG_VM is not set
-# CONFIG_DEBUG_WRITECOUNT is not set
+# CONFIG_DEBUG_USER is not set
 CONFIG_DECNET=m
 CONFIG_DECNET_NF_GRABULATOR=m
 # CONFIG_DECNET_ROUTER is not set
@@ -483,8 +451,6 @@ CONFIG_DEFAULT_TCP_CONG="cubic"
 # CONFIG_DEFAULT_VEGAS is not set
 # CONFIG_DEFAULT_WESTWOOD is not set
 CONFIG_DEFCONFIG_LIST="/lib/modules/$UNAME_RELEASE/.config"
-CONFIG_DETECT_HUNG_TASK=y
-CONFIG_DETECT_SOFTLOCKUP=y
 # CONFIG_DEVKMEM is not set
 CONFIG_DEVPORT=y
 # CONFIG_DEVPTS_MULTIPLE_INSTANCES is not set
@@ -552,7 +518,6 @@ CONFIG_EXTRA_FIRMWARE=""
 CONFIG_FAT_DEFAULT_CODEPAGE=437
 CONFIG_FAT_DEFAULT_IOCHARSET="iso8859-1"
 CONFIG_FAT_FS=y
-# CONFIG_FAULT_INJECTION is not set
 CONFIG_FB=y
 # CONFIG_FB_3DFX is not set
 # CONFIG_FB_ARK is not set
@@ -638,6 +603,7 @@ CONFIG_FORCE_MAX_ZONEORDER=12
 CONFIG_FRAMEBUFFER_CONSOLE=y
 # CONFIG_FRAMEBUFFER_CONSOLE_DETECT_PRIMARY is not set
 # CONFIG_FRAMEBUFFER_CONSOLE_ROTATION is not set
+CONFIG_FRAME_POINTER=y
 CONFIG_FRAME_WARN=1024
 CONFIG_FREEZER=y
 # CONFIG_FSAM7400 is not set
@@ -864,6 +830,7 @@ CONFIG_IP6_NF_MATCH_OPTS=m
 CONFIG_IP6_NF_MATCH_RT=m
 CONFIG_IP6_NF_QUEUE=m
 CONFIG_IP6_NF_RAW=m
+# CONFIG_IP6_NF_SECURITY is not set
 CONFIG_IP6_NF_TARGET_HL=m
 CONFIG_IP6_NF_TARGET_LOG=m
 CONFIG_IP6_NF_TARGET_REJECT=m
@@ -892,7 +859,6 @@ CONFIG_IP_DCCP=m
 CONFIG_IP_DCCP_CCID3=y
 # CONFIG_IP_DCCP_CCID3_DEBUG is not set
 CONFIG_IP_DCCP_CCID3_RTO=100
-# CONFIG_IP_DCCP_DEBUG is not set
 CONFIG_IP_DCCP_TFRC_LIB=y
 CONFIG_IP_FIB_HASH=y
 # CONFIG_IP_FIB_TRIE is not set
@@ -911,6 +877,7 @@ CONFIG_IP_NF_MATCH_ECN=m
 CONFIG_IP_NF_MATCH_TTL=m
 CONFIG_IP_NF_QUEUE=m
 CONFIG_IP_NF_RAW=m
+# CONFIG_IP_NF_SECURITY is not set
 CONFIG_IP_NF_TARGET_CLUSTERIP=m
 CONFIG_IP_NF_TARGET_ECN=m
 CONFIG_IP_NF_TARGET_LOG=m
@@ -991,7 +958,6 @@ CONFIG_JFS_STATISTICS=y
 # CONFIG_JME is not set
 CONFIG_JOLIET=y
 CONFIG_KALLSYMS=y
-# CONFIG_KALLSYMS_ALL is not set
 # CONFIG_KALLSYMS_EXTRA_PASS is not set
 CONFIG_KARMA_PARTITION=y
 # CONFIG_KEXEC is not set
@@ -1005,11 +971,9 @@ CONFIG_KEYBOARD_GPIO=y
 # CONFIG_KEYBOARD_XTKBD is not set
 CONFIG_KEYS=y
 # CONFIG_KEYS_DEBUG_PROC_KEYS is not set
-# CONFIG_KGDB is not set
 CONFIG_KINGSUN_DONGLE=m
 # CONFIG_KMEMTRACE is not set
 CONFIG_KPROBES=y
-# CONFIG_KPROBES_SANITY_TEST is not set
 CONFIG_KRETPROBES=y
 # CONFIG_KS8842 is not set
 # CONFIG_KS8851 is not set
@@ -1062,7 +1026,6 @@ CONFIG_LIRC_SIR=m
 CONFIG_LIRC_STREAMZAP=m
 CONFIG_LIRC_TTUSBIR=m
 CONFIG_LITELINK_DONGLE=m
-# CONFIG_LKDTM is not set
 CONFIG_LLC=m
 CONFIG_LLC2=m
 CONFIG_LMPCM_USB=m
@@ -1071,7 +1034,6 @@ CONFIG_LOCALVERSION=""
 CONFIG_LOCKD=y
 CONFIG_LOCKDEP_SUPPORT=y
 CONFIG_LOCKD_V4=y
-# CONFIG_LOCK_STAT is not set
 CONFIG_LOGO=y
 CONFIG_LOGO_LINUX_CLUT224=y
 # CONFIG_LOGO_LINUX_MONO is not set
@@ -1102,7 +1064,7 @@ CONFIG_MACH_DOVE_DB_Z0=y
 # CONFIG_MACH_DOVE_RD_AVNG_Z0 is not set
 # CONFIG_MACVLAN is not set
 CONFIG_MAC_PARTITION=y
-CONFIG_MAGIC_SYSRQ=y
+# CONFIG_MAGIC_SYSRQ is not set
 CONFIG_MARKERS=y
 # CONFIG_MARVELL_PHY is not set
 CONFIG_MAX1535=y
@@ -1362,6 +1324,7 @@ CONFIG_NETFILTER_XT_TARGET_SECMARK=m
 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
 # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set
 # CONFIG_NETFILTER_XT_TARGET_TRACE is not set
+# CONFIG_NETLABEL is not set
 # CONFIG_NETPOLL is not set
 CONFIG_NETROM=m
 CONFIG_NETWORK_FILESYSTEMS=y
@@ -1388,7 +1351,6 @@ CONFIG_NET_CLS_RSVP=m
 CONFIG_NET_CLS_RSVP6=m
 CONFIG_NET_CLS_TCINDEX=m
 # CONFIG_NET_CLS_U32 is not set
-# CONFIG_NET_DCCPPROBE is not set
 # CONFIG_NET_DMA is not set
 # CONFIG_NET_DROP_MONITOR is not set
 CONFIG_NET_DSA=y
@@ -1553,7 +1515,6 @@ CONFIG_OCF_EP80579=m
 CONFIG_OCF_HIFN=m
 # CONFIG_OCF_HIFNHIPP is not set
 # CONFIG_OCF_IXP4XX is not set
-# CONFIG_OCF_IXP4XX_SHA1_MD5 is not set
 CONFIG_OCF_OCF=y
 CONFIG_OCF_OCFNULL=m
 # CONFIG_OCF_RANDOMHARVEST is not set
@@ -1573,7 +1534,6 @@ CONFIG_PACKET=y
 CONFIG_PACKET_MMAP=y
 CONFIG_PAGEFLAGS_EXTENDED=y
 CONFIG_PAGE_OFFSET=0xC0000000
-# CONFIG_PAGE_POISONING is not set
 # CONFIG_PARPORT is not set
 CONFIG_PARTITION_ADVANCED=y
 # CONFIG_PATA_ALI is not set
@@ -1618,7 +1578,6 @@ CONFIG_PARTITION_ADVANCED=y
 # CONFIG_PCCARD is not set
 # CONFIG_PCF8575 is not set
 CONFIG_PCI=y
-# CONFIG_PCI_DEBUG is not set
 # CONFIG_PCI_IOV is not set
 CONFIG_PCI_LEGACY=y
 CONFIG_PCI_QUIRKS=y
@@ -1654,7 +1613,6 @@ CONFIG_PROC_SYSCTL=y
 # CONFIG_PROFILE_ALL_BRANCHES is not set
 # CONFIG_PROFILE_ANNOTATED_BRANCHES is not set
 CONFIG_PROFILING=y
-# CONFIG_PROVE_LOCKING is not set
 CONFIG_QFMT_V1=m
 CONFIG_QFMT_V2=m
 # CONFIG_QLA3XXX is not set
@@ -1670,7 +1628,6 @@ CONFIG_QUOTA_TREE=m
 # CONFIG_RAID_ATTRS is not set
 # CONFIG_RAW_DRIVER is not set
 # CONFIG_RCU_CPU_STALL_DETECTOR is not set
-# CONFIG_RCU_TORTURE_TEST is not set
 # CONFIG_REALTEK_PHY is not set
 # CONFIG_REGULATOR is not set
 # CONFIG_REISERFS_CHECK is not set
@@ -1742,7 +1699,6 @@ CONFIG_RTC_LIB=y
 # CONFIG_RTL8180 is not set
 # CONFIG_RTL8187 is not set
 CONFIG_RT_MUTEXES=y
-# CONFIG_RT_MUTEX_TESTER is not set
 CONFIG_RWSEM_GENERIC_SPINLOCK=y
 CONFIG_RXKAD=m
 # CONFIG_SAMPLES is not set
@@ -1765,8 +1721,6 @@ CONFIG_SATA_PMP=y
 # CONFIG_SATA_VIA is not set
 # CONFIG_SATA_VITESSE is not set
 # CONFIG_SC92031 is not set
-# CONFIG_SCHEDSTATS is not set
-# CONFIG_SCHED_DEBUG is not set
 # CONFIG_SCHED_TRACER is not set
 CONFIG_SCSI=y
 # CONFIG_SCSI_3W_9XXX is not set
@@ -1825,9 +1779,16 @@ CONFIG_SCTP_HMAC_MD5=y
 # CONFIG_SCTP_HMAC_NONE is not set
 # CONFIG_SCTP_HMAC_SHA1 is not set
 # CONFIG_SDIO_UART is not set
-# CONFIG_SECURITY is not set
-# CONFIG_SECURITYFS is not set
-# CONFIG_SECURITY_FILE_CAPABILITIES is not set
+CONFIG_SECURITY=y
+CONFIG_SECURITYFS=y
+# CONFIG_SECURITY_APPARMOR is not set
+CONFIG_SECURITY_DEFAULT="apparmor"
+CONFIG_SECURITY_FILE_CAPABILITIES=y
+CONFIG_SECURITY_NETWORK=y
+# CONFIG_SECURITY_NETWORK_XFRM is not set
+CONFIG_SECURITY_PATH=y
+# CONFIG_SECURITY_ROOTPLUG is not set
+CONFIG_SECURITY_TOMOYO=y
 CONFIG_SELECT_MEMORY_MODEL=y
 # CONFIG_SENSORS_AD7414 is not set
 # CONFIG_SENSORS_AD7418 is not set
@@ -2056,7 +2017,6 @@ CONFIG_SOUND_PRIME=y
 # CONFIG_SPARSEMEM_MANUAL is not set
 CONFIG_SPI=y
 # CONFIG_SPI_BITBANG is not set
-# CONFIG_SPI_DEBUG is not set
 # CONFIG_SPI_GPIO is not set
 CONFIG_SPI_MASTER=y
 CONFIG_SPI_MV=y
@@ -2124,7 +2084,6 @@ CONFIG_TEXTSEARCH_KMP=m
 CONFIG_TICK_ONESHOT=y
 # CONFIG_TIGON3 is not set
 CONFIG_TIMERFD=y
-CONFIG_TIMER_STATS=y
 CONFIG_TIPC=m
 # CONFIG_TIPC_ADVANCED is not set
 # CONFIG_TIPC_DEBUG is not set
@@ -2230,7 +2189,6 @@ CONFIG_USB_GADGET=y
 # CONFIG_USB_GADGET_AT91 is not set
 # CONFIG_USB_GADGET_ATMEL_USBA is not set
 # CONFIG_USB_GADGET_CI13XXX is not set
-# CONFIG_USB_GADGET_DEBUG is not set
 # CONFIG_USB_GADGET_DEBUG_FILES is not set
 # CONFIG_USB_GADGET_DEBUG_FS is not set
 CONFIG_USB_GADGET_DUALSPEED=y
-- 
1.6.0.4





More information about the kernel-team mailing list